Extracted

• • Target
    DOC-6FK2Q0.lnk
  • Size 1KB
  • SHA256 9365e9ff66534c479b409b73f449e84a1054760d1f7c1a0a13145d5ac2d6ff53
  • MD5 ee75404ba437be4e01e37631730968e9
  • SHA1 b6025154f3ff5928f507b65c8033483b25345343
  • SHA512 751256fb2c6c35676ccd9109b9b2795af8549dd2cb77cbe510b60b043206e49292ee17ae47364ea0e9a4e96cd8852c7967f74373c7990d7a076d4e358e4cb5f3
  • TLSH
    T1DC3149103EFA0624F3F79E735477A71499FFB8568E11CA1E418546481472A04E07EFB7
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwareexecutionpersistenceransomwarespywaredefense_evasiondiscovery

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2