Extracted

• • Target

    38fca4a6387b2d872476cb68f354ee54d9d611348d50af95c1ec8e5f63977d5a.exe

  • Size

    217KB

  • MD5

    5a1af007c61a3d5684de7b79fc286a6f

  • SHA1

    f646f3c891354831b479895434d9567f897b3137

  • SHA256

    38fca4a6387b2d872476cb68f354ee54d9d611348d50af95c1ec8e5f63977d5a

  • SHA512

    176156876a5f3593a2152360b1d871c0a7430b44780e6aad3078f360bcba1434d95e5fb80a8fdec48d180e87036972234165d529f24c15adc820b2acf81930cc

  • SSDEEP

    1536:hNSXbc74YTOnlNSUL09atT0mBBA7aKSvIYFwAfdvoKQO51weQ01:hEo75OnPSI09qgmBBAGKSvwovoK9bwC1

  Score

  10^/10

  discovery

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2