General
-
Target
c539e1b35b57d8924a24e156bfcc7975.exe
-
Size
286KB
-
Sample
230331-1cfsyseh51
-
MD5
c539e1b35b57d8924a24e156bfcc7975
-
SHA1
41be2de44376f7cc477d9213867f288702fc9a8d
-
SHA256
ce53630e164fefbd80810e812308044a6c6705ae6c797aa680c0952b1b28c15f
-
SHA512
8019d2e229244e74228fc1dbe1ac0a21eca864ab355e70ac54c29959c31f12511883f5ea218e424e81cb511183e7fabbe0f3bc87c9d3bd7436bfe42c58ee56b9
-
SSDEEP
3072:PpyvhHX7mjjOOM+WCBSi1pm64MlT6pb7gI7DOr2mntlMwGiphVBVda5MWaOiuCPg:xSCjvhbmWlQ7PyztHphna5DRiuIq59P
Static task
static1
Behavioral task
behavioral1
Sample
c539e1b35b57d8924a24e156bfcc7975.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
c539e1b35b57d8924a24e156bfcc7975.exe
-
Size
286KB
-
MD5
c539e1b35b57d8924a24e156bfcc7975
-
SHA1
41be2de44376f7cc477d9213867f288702fc9a8d
-
SHA256
ce53630e164fefbd80810e812308044a6c6705ae6c797aa680c0952b1b28c15f
-
SHA512
8019d2e229244e74228fc1dbe1ac0a21eca864ab355e70ac54c29959c31f12511883f5ea218e424e81cb511183e7fabbe0f3bc87c9d3bd7436bfe42c58ee56b9
-
SSDEEP
3072:PpyvhHX7mjjOOM+WCBSi1pm64MlT6pb7gI7DOr2mntlMwGiphVBVda5MWaOiuCPg:xSCjvhbmWlQ7PyztHphna5DRiuIq59P
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-