General
-
Target
8e91d406fc994c8cf7108a4ad5dd19e00f83de4f246db545b33fad12b97bb226
-
Size
2.9MB
-
Sample
230315-slg4daga2y
-
MD5
bd226502ad3d2a9e97b5d934a00e7662
-
SHA1
6c5a2da673c20d74ea9d5dcaed80d329d7034ef8
-
SHA256
8e91d406fc994c8cf7108a4ad5dd19e00f83de4f246db545b33fad12b97bb226
-
SHA512
60ecd67b136cbfe7ce8b9f426b36b1967b2ef98455453732ec6bfe909e4a968f771e05d7a69ea269c52db815012b1cea420cb75651b9caec6e77320ead213158
-
SSDEEP
49152:AGSs0AvEzxCKQ70aHQGiqjKkuhtJZQXkyj+a93loBoteYW1VaNiHqEzlVOKz:dSs0AvCxBQ7nQ3KgtJZAB3loe0YW1VKO
Static task
static1
Behavioral task
behavioral1
Sample
8e91d406fc994c8cf7108a4ad5dd19e00f83de4f246db545b33fad12b97bb226.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
8e91d406fc994c8cf7108a4ad5dd19e00f83de4f246db545b33fad12b97bb226
-
Size
2.9MB
-
MD5
bd226502ad3d2a9e97b5d934a00e7662
-
SHA1
6c5a2da673c20d74ea9d5dcaed80d329d7034ef8
-
SHA256
8e91d406fc994c8cf7108a4ad5dd19e00f83de4f246db545b33fad12b97bb226
-
SHA512
60ecd67b136cbfe7ce8b9f426b36b1967b2ef98455453732ec6bfe909e4a968f771e05d7a69ea269c52db815012b1cea420cb75651b9caec6e77320ead213158
-
SSDEEP
49152:AGSs0AvEzxCKQ70aHQGiqjKkuhtJZQXkyj+a93loBoteYW1VaNiHqEzlVOKz:dSs0AvCxBQ7nQ3KgtJZAB3loe0YW1VKO
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-