General
-
Target
file.exe
-
Size
1.9MB
-
Sample
230324-l5mpmsff9s
-
MD5
1b25ebb15febf3df865119a5cfbc6ec0
-
SHA1
bcdd463ee2870d82efc590c2ed1a50ae587f60fb
-
SHA256
e3f43693acaca6abb1b0bb8de4a504c52f1e50e08b039d59ffe273696bd69021
-
SHA512
1e425dc8465e8dce13018c4adfe5d5ddc94f3a9b8825de3f4860233d77e4537a29dba3af866a82afed160032650332dcd43f1648b090ccb496e3e413c3552a70
-
SSDEEP
49152:EGlJfs0pdlpjtFmpcE2gbHQ9U+MxkkCTcZh5RmpUDO5dlLYp:5bpjtMcWbH6Yx7HHXm2YPYp
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.9MB
-
MD5
1b25ebb15febf3df865119a5cfbc6ec0
-
SHA1
bcdd463ee2870d82efc590c2ed1a50ae587f60fb
-
SHA256
e3f43693acaca6abb1b0bb8de4a504c52f1e50e08b039d59ffe273696bd69021
-
SHA512
1e425dc8465e8dce13018c4adfe5d5ddc94f3a9b8825de3f4860233d77e4537a29dba3af866a82afed160032650332dcd43f1648b090ccb496e3e413c3552a70
-
SSDEEP
49152:EGlJfs0pdlpjtFmpcE2gbHQ9U+MxkkCTcZh5RmpUDO5dlLYp:5bpjtMcWbH6Yx7HHXm2YPYp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-