Extracted

• • Target

    WindowsUpdateService.exe

  • Size

    9.5MB

  • MD5

    792d47eaf8e8f7752ee07df094f402ba

  • SHA1

    79b8dd99dbfb362a3adbe8d5e798510623b7a9a6

  • SHA256

    2782a2bbab02cefb45d92ad5d82d68e389286904f0cb0bd2be80562f1349bc7d

  • SHA512

    9b67a632b0dd6dfbfa27651da2366c40e3447fc4f8a4e26e04408ea9a93c7b2742b60195b099fbf68fa2015c46644b0074960e642b75112e5c58ed09cd0b2f71

  • SSDEEP

    98304:80gjE8Kq+sJgTVxXM29X9BdNrHEYWvFnsVs:IEe+sJit9X9BfrkY3s

  Score

  7^/10

  persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence
  behavioral1