General
-
Target
file.exe
-
Size
2.7MB
-
Sample
230411-xgxqgsga6y
-
MD5
56da98a60b906b22a756798f409b57c1
-
SHA1
3ade96a40816aebb558e6f51e2eaba59a5926629
-
SHA256
f62fe6646047d7c5a7b445793ab595c3f747c0daba16b2f6c1942f28067b2247
-
SHA512
da7477bcc6a583fefb90692ca5a631510391d32cbb4a64546e9c8be68847b3550a842859185ecf6d71054ed41864446ae6dc1a412401d3e40f957a11f5abf5d8
-
SSDEEP
49152:zGlJfs+UG6UfiLqT8IscGsQ8/EIh3I5YOrvcDc2AeilbKBRd32WHygU:qlU9UqL48IJdQ8/EIhY5TQgCilb7WSt
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
2.7MB
-
MD5
56da98a60b906b22a756798f409b57c1
-
SHA1
3ade96a40816aebb558e6f51e2eaba59a5926629
-
SHA256
f62fe6646047d7c5a7b445793ab595c3f747c0daba16b2f6c1942f28067b2247
-
SHA512
da7477bcc6a583fefb90692ca5a631510391d32cbb4a64546e9c8be68847b3550a842859185ecf6d71054ed41864446ae6dc1a412401d3e40f957a11f5abf5d8
-
SSDEEP
49152:zGlJfs+UG6UfiLqT8IscGsQ8/EIh3I5YOrvcDc2AeilbKBRd32WHygU:qlU9UqL48IJdQ8/EIhY5TQgCilb7WSt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-