Extracted

• • Target

    c78b1a112fcbf6bd161eb1bdf347173907361519eebada75285274397d95ac5a

  • Size

    212KB

  • MD5

    6346461f741da4d83372687e1c00e51c

  • SHA1

    14bc31795d8654c28b016f7e44faa1ea8b49da67

  • SHA256

    c78b1a112fcbf6bd161eb1bdf347173907361519eebada75285274397d95ac5a

  • SHA512

    85316918f498e6b6a95218dbcb136e2f18e703fee2365b1c1c95bc25b86691035758c5975df8f747b2a8d2ecb3c120e05e280f9c0094ce3c103a295a6246adac

  • SSDEEP

    3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq

  Score

  7^/10

  discovery

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2