Extracted

• • Target
    e24d9afbc2ed01e348ef6946672ef5f310940dd57a5216d0f1edbe31c919374b
  • Size 601KB
  • SHA256 e24d9afbc2ed01e348ef6946672ef5f310940dd57a5216d0f1edbe31c919374b
  • MD5 d9862812455c4a0f7d07bf14e14db17c
  • SHA1 d0dd5a73cec6d80a32cbc90d4bac364eda45a6fb
  • SHA512 a9ea6fd272ffc805f9ed8f852d1404789855d76632615abd7320b910fc484fdb7c4b45193367cc55621cadae17252bbabb765f09f5a52dbabcf056ad9cddec6b
  • SSDEEP 12288:cmmEXhe7R9ubKYcX1knn4gzHoS6oQ5Mt6w/j:c/ERWR9ubKYdnn4gzoS6t5I
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2