General
-
Target
file
-
Size
1.2MB
-
Sample
230701-19fjfsba2z
-
MD5
5bbb01b5f3d539b79bac02d4b4174143
-
SHA1
7f401b44ac3dc3739f0a437b0d1c9e0fbcd7dba6
-
SHA256
bb31c2cc4403265b94db99bb1e213fdc86f1c90c8ced3a31e463a2a735510ccf
-
SHA512
834d31b7db82238efa232cfabdaa960527229e480ca37e06d55d169efa489dede59976ac99d2daea94bad38918940f15a612ad223e721c74f9579f8aa2e6e40e
-
SSDEEP
24576:OfOy9B1xjqOP0HaGaMvmrHIvsXvCZNlhgz3f5F8EK1rARpJjBBp/D:OGgLxOCMukuvUZghS2pvBp
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.2MB
-
MD5
5bbb01b5f3d539b79bac02d4b4174143
-
SHA1
7f401b44ac3dc3739f0a437b0d1c9e0fbcd7dba6
-
SHA256
bb31c2cc4403265b94db99bb1e213fdc86f1c90c8ced3a31e463a2a735510ccf
-
SHA512
834d31b7db82238efa232cfabdaa960527229e480ca37e06d55d169efa489dede59976ac99d2daea94bad38918940f15a612ad223e721c74f9579f8aa2e6e40e
-
SSDEEP
24576:OfOy9B1xjqOP0HaGaMvmrHIvsXvCZNlhgz3f5F8EK1rARpJjBBp/D:OGgLxOCMukuvUZghS2pvBp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-