General
-
Target
46243874b5bf6eb7d0da146121a74177653c36c4fc25474ef0049ca51a1b113a.exe
-
Size
1.2MB
-
Sample
230702-f6wq2sag39
-
MD5
f5a60dc8bf54cde2311f70d475bc4448
-
SHA1
5df25244207ed640fd39e2633393c9e8dacd5756
-
SHA256
46243874b5bf6eb7d0da146121a74177653c36c4fc25474ef0049ca51a1b113a
-
SHA512
7127fac5a450bfa1324a813358fe182bd304f90fdca4f9bfe16c1e87114f59b12af139842ddcc88539e9a64f8cabf76d8f841884048fa1b2c2d402c2b7fc1aa4
-
SSDEEP
24576:JfOyV8I8tTInyj5B9Jj042DbqPfd6rKjJysz6zilBDnNUWCMW6:JGk8I3neB9Jo42DOPFZ9G+lhvT
Static task
static1
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
46243874b5bf6eb7d0da146121a74177653c36c4fc25474ef0049ca51a1b113a.exe
-
Size
1.2MB
-
MD5
f5a60dc8bf54cde2311f70d475bc4448
-
SHA1
5df25244207ed640fd39e2633393c9e8dacd5756
-
SHA256
46243874b5bf6eb7d0da146121a74177653c36c4fc25474ef0049ca51a1b113a
-
SHA512
7127fac5a450bfa1324a813358fe182bd304f90fdca4f9bfe16c1e87114f59b12af139842ddcc88539e9a64f8cabf76d8f841884048fa1b2c2d402c2b7fc1aa4
-
SSDEEP
24576:JfOyV8I8tTInyj5B9Jj042DbqPfd6rKjJysz6zilBDnNUWCMW6:JGk8I3neB9Jo42DOPFZ9G+lhvT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-