General
-
Target
file
-
Size
1.2MB
-
Sample
230703-rsnn3aab7t
-
MD5
19c3f3e6873aea7bfc10d4d2ebb7bb0a
-
SHA1
2c84ee58a69701311dd84d61f7ddc3d2b4fb9d49
-
SHA256
88f4a864f4f3eebdeba9f4c9ed95178e3b84785d132f73ff28196effa0565fe8
-
SHA512
1847655074eba47c2df2c1aed6a91eeec35749790c7289ae2fb13c3977e0fec0c75438bd15a144aaf6c5a945332c27463cd923c9bc4d4f50b1875e468ffb55dc
-
SSDEEP
24576:JfOy8O4wgnsoIf+9r5Me65gS+j3ePrJwjVxopve4B2nNUWCMW6:JGzw0OQr5Mh5p+sKSpvzsvT
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Malware Config
Extracted
gcleaner
45.12.253.56
45.12.253.72
45.12.253.98
45.12.253.75
Targets
-
-
Target
file
-
Size
1.2MB
-
MD5
19c3f3e6873aea7bfc10d4d2ebb7bb0a
-
SHA1
2c84ee58a69701311dd84d61f7ddc3d2b4fb9d49
-
SHA256
88f4a864f4f3eebdeba9f4c9ed95178e3b84785d132f73ff28196effa0565fe8
-
SHA512
1847655074eba47c2df2c1aed6a91eeec35749790c7289ae2fb13c3977e0fec0c75438bd15a144aaf6c5a945332c27463cd923c9bc4d4f50b1875e468ffb55dc
-
SSDEEP
24576:JfOy8O4wgnsoIf+9r5Me65gS+j3ePrJwjVxopve4B2nNUWCMW6:JGzw0OQr5Mh5p+sKSpvzsvT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-