Checks computer location settings

Looks up country code configured in the registry, likely geofence.

Executes dropped EXE

Checks whether UAC is enabled

Network Share Discovery

Attempt to gather information on host network.

Obfuscated Files or Information: Command Obfuscation

Adversaries may obfuscate content during command execution to impede detection.

Suspicious use of NtSetInformationThreadHideFromDebugger