General
-
Target
file
-
Size
1.2MB
-
Sample
230701-xcs7haae3z
-
MD5
2584dfe26f8389b7821b701568d5a31b
-
SHA1
f09cedd4f6ed7567cd0069981253bb68d8a0b721
-
SHA256
06bf7d9d545c37c3ee36c0a67a4b6575edbfcb90b4257884e0ed56ee29ca9214
-
SHA512
97efe0c9e4690b9e84efff60ac02d568cafe9eba3dbc71527d1e979c175774530fea64b76b6162c1f3c8711e6be9b63e96c8145262fd9805134e42cf6fcf445c
-
SSDEEP
24576:OfOyAj5HnRRZ4wxXZy7270FJM334d0lPMd4VVKz1rARpJjBBp/D:OG3yw397AJmm0lPQYI2pvBp
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.2MB
-
MD5
2584dfe26f8389b7821b701568d5a31b
-
SHA1
f09cedd4f6ed7567cd0069981253bb68d8a0b721
-
SHA256
06bf7d9d545c37c3ee36c0a67a4b6575edbfcb90b4257884e0ed56ee29ca9214
-
SHA512
97efe0c9e4690b9e84efff60ac02d568cafe9eba3dbc71527d1e979c175774530fea64b76b6162c1f3c8711e6be9b63e96c8145262fd9805134e42cf6fcf445c
-
SSDEEP
24576:OfOyAj5HnRRZ4wxXZy7270FJM334d0lPMd4VVKz1rARpJjBBp/D:OG3yw397AJmm0lPQYI2pvBp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-