General
-
Target
dd2711669b0f650baab85bf1191c6b84.exe
-
Size
2.6MB
-
Sample
230317-1lf53sab37
-
MD5
dd2711669b0f650baab85bf1191c6b84
-
SHA1
32fccccadcb652baa898bb9ce04fca0c5a2c2e2a
-
SHA256
72238987f1f659c6e41a74a077ea43fd07d6709be29e1f20546ba6f9ebeccc1a
-
SHA512
a8695c2fe06af4f7e1039da80050154cb66b09d6eb8ff7d95ea06c18d4bfa7fd8209a9b95907b8a7fe3df5085ad4babc56097e77846e9b93a3498d83f1dc9e23
-
SSDEEP
49152:EGlJfsKC6CG1gNZ+B/TRn8PRAVp5TrlmSXLHntls1xk1/zLePYyRWjd5dlLYp:5DCGWNZuoRwZpmKnTsLkNzLeAyRWjrP+
Static task
static1
Behavioral task
behavioral1
Sample
dd2711669b0f650baab85bf1191c6b84.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
dd2711669b0f650baab85bf1191c6b84.exe
-
Size
2.6MB
-
MD5
dd2711669b0f650baab85bf1191c6b84
-
SHA1
32fccccadcb652baa898bb9ce04fca0c5a2c2e2a
-
SHA256
72238987f1f659c6e41a74a077ea43fd07d6709be29e1f20546ba6f9ebeccc1a
-
SHA512
a8695c2fe06af4f7e1039da80050154cb66b09d6eb8ff7d95ea06c18d4bfa7fd8209a9b95907b8a7fe3df5085ad4babc56097e77846e9b93a3498d83f1dc9e23
-
SSDEEP
49152:EGlJfsKC6CG1gNZ+B/TRn8PRAVp5TrlmSXLHntls1xk1/zLePYyRWjd5dlLYp:5DCGWNZuoRwZpmKnTsLkNzLeAyRWjrP+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-