Extracted

• • Target
    DOC-0LC245.lnk
  • Size 2KB
  • SHA256 22f07c6ea64dd640ff062126ae40199ec225c59077eebc06b053b81361f1937a
  • MD5 d17fcb74183699470440dd7ff53ca5e6
  • SHA1 239e9a9ed90245caa977e15f34c9e220554034f1
  • SHA512 eb3c0d8cc83c6c9a84a8aa0db8c8eb8bcfe1ca521a6c8b17c5b4f75713859a1d90090abc09c948a10a48e9148d4b3ea2f722d24ec2a7247105fc62920a3d037b
  • TLSH
    T1465134803AE911D8F3FB9E32ECFA6B91497BB8615DB0C58D0C50804C1822B41D9B7B33
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwarepersistenceransomwarespywarediscovery

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2