Extracted

• • Target
    Contrato_Indeniza_Brasil-JJMZ3M.lnk
  • Size 1KB
  • SHA256 0b8d85c6e534031d208394edded632b029e0c242500c5da3a80dc10eac0eb73f
  • MD5 669f368fce80895bcb82b8d6a83921ca
  • SHA1 ee33b8fb0413c723cbb7fdf90ea86fe4328a4991
  • SHA512 09fe21017f6762de6181a29bb325653c3bd979d311b2f2d9eac6b059b032f6bdccb02ed416dfd91a38c1390add08e5edca48689b1ee8f2a82f8cb80c60e247d7
  • TLSH
    T1113197002AFD0614F3F79E7689BB672199BBB8968E21CA1D4090464C1466A10E67BF77
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2