General
-
Target
file
-
Size
1.7MB
-
Sample
230125-l3eagsff63
-
MD5
f3e47d9ef54b7783e66a3267906c4a51
-
SHA1
e2352a47e9c80d619f6a8a8f86ed9483708dab58
-
SHA256
3934b66fb8cbbaf868f60d3d7fd20d38a8069c454e4128ed802b247f9c0cc22d
-
SHA512
e881c730725c71e4c1344aaf9f23ec3b9ef1dccb225d6b2fdf2f3a4555c7e9a56a0881327871bb9c2fff0542945f6ca385abac4efa892206d7d8cb7b2af6e761
-
SSDEEP
49152:ZlZbZ4P0MDMpNtEmFmsbk5hn5c9LCgv2MR:NuMphA5cBv2MR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.7MB
-
MD5
f3e47d9ef54b7783e66a3267906c4a51
-
SHA1
e2352a47e9c80d619f6a8a8f86ed9483708dab58
-
SHA256
3934b66fb8cbbaf868f60d3d7fd20d38a8069c454e4128ed802b247f9c0cc22d
-
SHA512
e881c730725c71e4c1344aaf9f23ec3b9ef1dccb225d6b2fdf2f3a4555c7e9a56a0881327871bb9c2fff0542945f6ca385abac4efa892206d7d8cb7b2af6e761
-
SSDEEP
49152:ZlZbZ4P0MDMpNtEmFmsbk5hn5c9LCgv2MR:NuMphA5cBv2MR
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-