Extracted

• • Target
    Contrato_Indeniza_Brasil-YBDPQK.lnk
  • Size 1KB
  • SHA256 2bc9d3003c7b135f18b28b1175536a03e0006e88f1625d5fbdc806c68d50613c
  • MD5 1471ebf9c144cc4c0e064e95d30639c6
  • SHA1 1dd4cdcf295ed0bde30bc1c3b456a269b2a9ac1a
  • SHA512 b09fd1ba8399c70d810bc46c453205aa1c980620ae3faa68b9a218d3c4786bb98a02b473a76e4a4fc8acb94233fe0b47b8290804dc64502acd9d8f62d2f94f02
  • TLSH
    T17F3197003AFD0614F3B38E7689BB6B2199BAF9968E20CA1D4090464C5462A00E97BF67
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2