Extracted

• • Target
    LeXNET-DOC-B8Z0LO.lnk
  • Size 1KB
  • SHA256 ed9a0f7224f8d49e60d44990453dc338670344b86d4fcc5a2c947a74321b206f
  • MD5 277970070d4c9ba2501f52b81baa238a
  • SHA1 f3799018c3b9d781f2032afa2dfa73f76673a598
  • SHA512 d92233d0ffe9040b8e500e2a7b1d1f162df4f13bf26cedd98f2bbbe1e404eccd43a73864b4fe10a8204fa4e51d1be2c5046c1ea9483b282fbcd8aff0d0ac1d0a
  • TLSH
    T1DB31CB803EFC0664F3B3DEB680BB571089BBB89A8D10CA2E0141854C1032A11E17BF67
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2