General
-
Target
file.exe
-
Size
1.1MB
-
Sample
230702-jttmpscb4s
-
MD5
a0207c0318ffa5ddd2478c88efacb507
-
SHA1
bd0c33b2201b0d75b26520ac2b71dfb500b60823
-
SHA256
474e293e9c25fdccd36c77f62b4b234fc97d8f1122dcbe78494f5482b6675f44
-
SHA512
7d4002639ab320fccbceac483b6f33cc5d5194efff467b2a55d200f9ef1534fa87b80b3d7f4f49c56ce49193b6341393b1080ea9fe2ab146ee2209937e7bc4b5
-
SSDEEP
24576:JfOyR+tEfuVp0lwGp4gtK6aUGhNV+kcYuBrGTxifMbTunNUWCMW6:JGKcEGolwbgw6VGLV/DwrG9vTuvT
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file.exe
-
Size
1.1MB
-
MD5
a0207c0318ffa5ddd2478c88efacb507
-
SHA1
bd0c33b2201b0d75b26520ac2b71dfb500b60823
-
SHA256
474e293e9c25fdccd36c77f62b4b234fc97d8f1122dcbe78494f5482b6675f44
-
SHA512
7d4002639ab320fccbceac483b6f33cc5d5194efff467b2a55d200f9ef1534fa87b80b3d7f4f49c56ce49193b6341393b1080ea9fe2ab146ee2209937e7bc4b5
-
SSDEEP
24576:JfOyR+tEfuVp0lwGp4gtK6aUGhNV+kcYuBrGTxifMbTunNUWCMW6:JGKcEGolwbgw6VGLV/DwrG9vTuvT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-