General
-
Target
file.exe
-
Size
1.2MB
-
Sample
230627-evspksdh5s
-
MD5
439f902cad5984cfede4df7e6db3089f
-
SHA1
71b8fda375cb9514ebee9a97b57446fb7d9ae79f
-
SHA256
a966075818dd971effd37c47d3de59591064a7bc99f37296e04c6d8a63ce3ea2
-
SHA512
31ad8d5a13b3968ad0d2b3ea6118a78bbbdcace3b96020319f8fffcc8471d370473e7deaca162965f3486009d0f09c9c0f7342bc62751f2bf118cfc1950703ef
-
SSDEEP
24576:tfOy1LH9CkWEPU0phI2ng58Lt1uD2gR1nCWZtP/hNy:tGkL2gphQ5YkD2wnCg5/3y
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.2MB
-
MD5
439f902cad5984cfede4df7e6db3089f
-
SHA1
71b8fda375cb9514ebee9a97b57446fb7d9ae79f
-
SHA256
a966075818dd971effd37c47d3de59591064a7bc99f37296e04c6d8a63ce3ea2
-
SHA512
31ad8d5a13b3968ad0d2b3ea6118a78bbbdcace3b96020319f8fffcc8471d370473e7deaca162965f3486009d0f09c9c0f7342bc62751f2bf118cfc1950703ef
-
SSDEEP
24576:tfOy1LH9CkWEPU0phI2ng58Lt1uD2gR1nCWZtP/hNy:tGkL2gphQ5YkD2wnCg5/3y
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-