General
-
Target
file.exe
-
Size
1.2MB
-
Sample
230702-hx7s3aah76
-
MD5
1deba2097117f3f3712e294a4cf10b89
-
SHA1
86c3627f3158a58469774a0d851d523c62734e75
-
SHA256
4e760da58e2971e77ee25b48a459db367512c6bfd539b4f410714c63989258f4
-
SHA512
7259914cc41b78d2ea9cf329450800a17e9289eb4e999352d5c8c6e14a14a8738babaaf2dd0e0b65c2378314d6765a8743d1e46b8518be7c0aec80dfc61840e0
-
SSDEEP
24576:JfOyvelUex7pA32sJLAVNSe1fL5CkRNn9nNUWCMW6:JGLlUex7pAGKLAJJLYkRvvT
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.2MB
-
MD5
1deba2097117f3f3712e294a4cf10b89
-
SHA1
86c3627f3158a58469774a0d851d523c62734e75
-
SHA256
4e760da58e2971e77ee25b48a459db367512c6bfd539b4f410714c63989258f4
-
SHA512
7259914cc41b78d2ea9cf329450800a17e9289eb4e999352d5c8c6e14a14a8738babaaf2dd0e0b65c2378314d6765a8743d1e46b8518be7c0aec80dfc61840e0
-
SSDEEP
24576:JfOyvelUex7pA32sJLAVNSe1fL5CkRNn9nNUWCMW6:JGLlUex7pAGKLAJJLYkRvvT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-