Extracted

• • Target

    94fefbae1f1c369c6fcc718d0ea40828b98f55b18c8b4fa68915ceef2d725707.js

  • Size

    720B

  • MD5

    ae846ea82b1d91f86790be6f0ebcf771

  • SHA1

    2ac8c84cd73cddc5f56573ef431b9eda914bc63b

  • SHA256

    94fefbae1f1c369c6fcc718d0ea40828b98f55b18c8b4fa68915ceef2d725707

  • SHA512

    ed9718786972eccc49d8e8f7294a6bedaa026662d637c9016fdd64cf4106b72772d61f08274c15a6da7583bb38035c470eeac3f77ac3cb94185c4aa70430734e

  Score

  10^/10

  dropperexecution

  • Blocklisted process makes network request

  • Download via BitsAdmin

    dropper

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2