General
-
Target
dc14233281f6c0306264fbbf945b0fdf.exe
-
Size
3.0MB
-
Sample
230411-n32f5acc28
-
MD5
dc14233281f6c0306264fbbf945b0fdf
-
SHA1
8dceb07853678dc09a257285ebfb89c261a83702
-
SHA256
4271f1ac4b48e05e4724832b7a1d19fa9423d93c3eb995f6a6b4ad0d0eda7af7
-
SHA512
f0545046d85a8f8354a95acb68d3f3404170ec522ed8cbc8aba08d15cb67b575ecdef0fc3015462a5a09db265984af825c08ddaea5ff603f3f27a95033ba9362
-
SSDEEP
98304:qrMyiMbTaRCawrzaBtNVRzt4YWRz+YgWSt:9A9a5z+vRzQWQ
Static task
static1
Behavioral task
behavioral1
Sample
dc14233281f6c0306264fbbf945b0fdf.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
dc14233281f6c0306264fbbf945b0fdf.exe
-
Size
3.0MB
-
MD5
dc14233281f6c0306264fbbf945b0fdf
-
SHA1
8dceb07853678dc09a257285ebfb89c261a83702
-
SHA256
4271f1ac4b48e05e4724832b7a1d19fa9423d93c3eb995f6a6b4ad0d0eda7af7
-
SHA512
f0545046d85a8f8354a95acb68d3f3404170ec522ed8cbc8aba08d15cb67b575ecdef0fc3015462a5a09db265984af825c08ddaea5ff603f3f27a95033ba9362
-
SSDEEP
98304:qrMyiMbTaRCawrzaBtNVRzt4YWRz+YgWSt:9A9a5z+vRzQWQ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-