Extracted

• • Target
    Contrato_Indeniza_Brasil-A48Z0T.lnk
  • Size 1KB
  • SHA256 dfef470160f6f579f63728f438c8b90fb418debf2081045e04659e78390028e2
  • MD5 006c96e2401bdbe298ffe89beb5e4a34
  • SHA1 40217cff0d38aac08f403ba8f5f4a66cd56e9e13
  • SHA512 2ac77ba2315a1e183f9e93596386e4c2c8399f7b22cb1abb70ceab1089f1f902def1efc36b1ff7fa04680b7714225b30248018afd3c94acfd5045ed9ba7bd832
  • TLSH
    T1EF3197403AFD0614F3F3DE7685BB5B1099BBB8968E20CA0E4080864C1462E00E97BF67
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2