General
-
Target
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3
-
Size
388KB
-
Sample
230129-wfhz9sga58
-
MD5
9d675cfd669e9d5e8e139e1f675a647b
-
SHA1
4cb277e4fc306534c7c99beb0235dd47a651969e
-
SHA256
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3
-
SHA512
e913e7ddb6798f8bed010019bfa35c316a38afe1b94c28468531e932b2dac6336cb7b9145ba3a4fe462592ccf7616ee7777081915b3f7607ea06ccf969421e13
-
SSDEEP
12288:SEk89D6ud+v/pqpSPERiLVX+5HyLPartDBSUvz:SEv99d+v/pqpqBOYCtVvz
Static task
static1
Behavioral task
behavioral1
Sample
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
gcleaner
gcleaner.pro
Targets
-
-
Target
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3
-
Size
388KB
-
MD5
9d675cfd669e9d5e8e139e1f675a647b
-
SHA1
4cb277e4fc306534c7c99beb0235dd47a651969e
-
SHA256
f62afa2c5eb2517b8760468d0966c2f24e4d35603c12a08d4c65bf4f65f919f3
-
SHA512
e913e7ddb6798f8bed010019bfa35c316a38afe1b94c28468531e932b2dac6336cb7b9145ba3a4fe462592ccf7616ee7777081915b3f7607ea06ccf969421e13
-
SSDEEP
12288:SEk89D6ud+v/pqpSPERiLVX+5HyLPartDBSUvz:SEv99d+v/pqpqBOYCtVvz
Score10/10-
OnlyLogger payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-