General
-
Target
file.exe
-
Size
1.9MB
-
Sample
230323-3l5jsaah26
-
MD5
b6866b6b89cc063ac98a60995ebe49c4
-
SHA1
28428a0e5e4d4a0a0538fc65b365b0dac9e780ec
-
SHA256
10c567dbaa0e65bbd01765ace55b1b8265bc160692a05521323483a955061966
-
SHA512
0f73da0f151411fecbf2b4ead4f0eca13ccc2615d941ff804605a7667237293b31263beafe865d0b8c21b7e70cb61203284b5b37ee53506199bed0bb6dd01138
-
SSDEEP
49152:EGlJfs7nlVdaZULj7Sdny1X0QWbJJoruNbepSy5dlLYp:5On51v7Sw1gJeUE3PYp
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.9MB
-
MD5
b6866b6b89cc063ac98a60995ebe49c4
-
SHA1
28428a0e5e4d4a0a0538fc65b365b0dac9e780ec
-
SHA256
10c567dbaa0e65bbd01765ace55b1b8265bc160692a05521323483a955061966
-
SHA512
0f73da0f151411fecbf2b4ead4f0eca13ccc2615d941ff804605a7667237293b31263beafe865d0b8c21b7e70cb61203284b5b37ee53506199bed0bb6dd01138
-
SSDEEP
49152:EGlJfs7nlVdaZULj7Sdny1X0QWbJJoruNbepSy5dlLYp:5On51v7Sw1gJeUE3PYp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-