General
-
Target
file.exe
-
Size
1.2MB
-
Sample
230701-ll2pfsgf24
-
MD5
f4a8c27e4d193cd67587f521162f1eca
-
SHA1
0916a0bda2edd125d2238782498f27bb97ea3eb2
-
SHA256
372afb90e481a8a4046b805beaf90d79df0aa95ad8064912763ca5feea026617
-
SHA512
ef210c09768a4307a0e21bb7a4dc94c5cf48ef3c5d85b46c34d2d77f76df77f0238c37e117ab4f61091294a35f1e3247f6a03b45ffdc5a8182b9d64a3684c3ef
-
SSDEEP
24576:OfOyN11DjhvZB1ldFvvtxh6ZRXDylyqav3ePD1rARpJjBBp/D:OGwnHhvnr7iRDqaOh2pvBp
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.2MB
-
MD5
f4a8c27e4d193cd67587f521162f1eca
-
SHA1
0916a0bda2edd125d2238782498f27bb97ea3eb2
-
SHA256
372afb90e481a8a4046b805beaf90d79df0aa95ad8064912763ca5feea026617
-
SHA512
ef210c09768a4307a0e21bb7a4dc94c5cf48ef3c5d85b46c34d2d77f76df77f0238c37e117ab4f61091294a35f1e3247f6a03b45ffdc5a8182b9d64a3684c3ef
-
SSDEEP
24576:OfOyN11DjhvZB1ldFvvtxh6ZRXDylyqav3ePD1rARpJjBBp/D:OGwnHhvnr7iRDqaOh2pvBp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-