Extracted

• • Target
    JustificantePDF2107-AS9JR9.lnk
  • Size 1KB
  • SHA256 a3da184885236a203e87c1429d0c50c012808e3f144b2a9a848f090f5982019b
  • MD5 76717267ed196a0172a8a4eef60ad1fa
  • SHA1 eb473c229f02068fd4456473ef59230e8c9db9c0
  • SHA512 c454ef30a073eedd1f187266ba3e2d6df31a520986dc1e65aa8c5051333d955d1396ade36fe905950876a38521140434c7063a9be2b2fc9971464bbc1b28fca2
  • TLSH
    T16E31CB103EFC0628F3B7CFB384BB571489BBB9568D20CA1D0040864C1072A01E67BF6B
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2