Extracted

• • Target
    LeXNET-DOC-Z57OGO.lnk
  • Size 1KB
  • SHA256 0cbd5f30a180a65c16f6c4b28d74073102bdd99947142aeba7cee0670b2488c1
  • MD5 4191f77ceec752a2176fe2d99a2b629b
  • SHA1 6ae2b411ceacd048cd0f698e2dc0761a9dcd6581
  • SHA512 c8c3dc608a4ea63b6b96c9e1a80bc892442558be8a25dbd791ae149e20181517712aea7d5a59f62036a051f9fb2f6f394e86ddac442a0280599a0e2999a944d5
  • TLSH
    T12731C0103FFC0524F3B3DEB3987B571059BBB8668D20C62D4040854C5072A01E17BF67
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2