Extracted

• • Target
    Contrato_Indeniza_Brasil-43R37R.lnk
  • Size 1KB
  • SHA256 11697385efeae82dcabf246d4c4be611963bbeb75aad0fd0f8d8188bb2837b80
  • MD5 5c7eea3e7aebb92bbef2d01823c98b69
  • SHA1 d9dc43fb22e77096ef1e7fce2b9fcaa2c20e7158
  • SHA512 413c5cfa60da175d70d2e39725448b823713e64b15bd28dcb6d35ace4ce30638fac56d614ad84b485778274a16c7aac0c83348c96c154ff882ec9825b3c40fb8
  • TLSH
    T1D53126003EFD0724F3B7DE76557BAB1099FBF9968E118A1D408446481466A04E57EFB3
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2