General
-
Target
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe
-
Size
319KB
-
Sample
230405-m41qjsdd52
-
MD5
5967f722e3b6ef7c9285a3c3e08612c8
-
SHA1
36dfb0b5437eee03f231d536dc96478e69d3c3f3
-
SHA256
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4
-
SHA512
f6a37f3aef850eedd36d207dc216b72893f1daa852926134a299e7f52bd1674bedeb0d69a285f0a0608c15cc86f57ef4a4068389c4bc49f865898bd21d451141
-
SSDEEP
6144:V3L7lp6tB4kt5+hSzkwf1tw3x8cRa65K206GXrbjwyGXQ9:V3Plwvt5+hS4q1w1N5KsKEX
Static task
static1
Behavioral task
behavioral1
Sample
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe
-
Size
319KB
-
MD5
5967f722e3b6ef7c9285a3c3e08612c8
-
SHA1
36dfb0b5437eee03f231d536dc96478e69d3c3f3
-
SHA256
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4
-
SHA512
f6a37f3aef850eedd36d207dc216b72893f1daa852926134a299e7f52bd1674bedeb0d69a285f0a0608c15cc86f57ef4a4068389c4bc49f865898bd21d451141
-
SSDEEP
6144:V3L7lp6tB4kt5+hSzkwf1tw3x8cRa65K206GXrbjwyGXQ9:V3Plwvt5+hS4q1w1N5KsKEX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-