General
-
Target
file.exe
-
Size
2.1MB
-
Sample
230624-jeng5sad69
-
MD5
996bb0ca947dc9b6a2d1268c36375a3e
-
SHA1
c450162775e9f90a02e44a991156e5e0d8312485
-
SHA256
d604590b5c7a14a354f325a3884dbefe9f01c19b0d6927e3aa4a437777022dd5
-
SHA512
bfe5e055eb1b31e170b7799e60e28ad9dee55af3cba075ea2e638459c9bdba15286e386350496451ace8fb2868c4c0fe0838f5dfa01c5198e5a32a8fbbec013b
-
SSDEEP
49152:zGwPVIk5nijergdkCKuo13f2wk036BmyarcgX7fdzgbIaT/k6fN6O:qwKii+FOwcBmyQfd8XTcwYO
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
2.1MB
-
MD5
996bb0ca947dc9b6a2d1268c36375a3e
-
SHA1
c450162775e9f90a02e44a991156e5e0d8312485
-
SHA256
d604590b5c7a14a354f325a3884dbefe9f01c19b0d6927e3aa4a437777022dd5
-
SHA512
bfe5e055eb1b31e170b7799e60e28ad9dee55af3cba075ea2e638459c9bdba15286e386350496451ace8fb2868c4c0fe0838f5dfa01c5198e5a32a8fbbec013b
-
SSDEEP
49152:zGwPVIk5nijergdkCKuo13f2wk036BmyarcgX7fdzgbIaT/k6fN6O:qwKii+FOwcBmyQfd8XTcwYO
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-