General
-
Target
ef0dda851eccd4bdd9311d9299a679639299683ec4e6741ff0ce2b0366108d64
-
Size
293KB
-
Sample
240425-ltzvtshe86
-
MD5
3fa7d706bc454825143f16e01ac3a1bb
-
SHA1
96ddd3ca9af68c938de16ac55fd286a7cf44e782
-
SHA256
ef0dda851eccd4bdd9311d9299a679639299683ec4e6741ff0ce2b0366108d64
-
SHA512
d4d349b3f40535e79997c3ec18caa202164e26ff167aa85b81d52ea805a8804a450209c5cae6495a4518fe761ef5a6278ecf53c88c83155c1c61cee101afea8d
-
SSDEEP
3072:mLjEvw617PwTBXWjFGT4YpBiF+6J4zTBJ3a2mGYiv05ZxKauhEh:T17aBGjFg4YpBiF+6yzDK1ioxKauQ
Static task
static1
Behavioral task
behavioral1
Sample
ef0dda851eccd4bdd9311d9299a679639299683ec4e6741ff0ce2b0366108d64.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.65.64
-
url_path
/advdlc.php
Targets
-
-
Target
ef0dda851eccd4bdd9311d9299a679639299683ec4e6741ff0ce2b0366108d64
-
Size
293KB
-
MD5
3fa7d706bc454825143f16e01ac3a1bb
-
SHA1
96ddd3ca9af68c938de16ac55fd286a7cf44e782
-
SHA256
ef0dda851eccd4bdd9311d9299a679639299683ec4e6741ff0ce2b0366108d64
-
SHA512
d4d349b3f40535e79997c3ec18caa202164e26ff167aa85b81d52ea805a8804a450209c5cae6495a4518fe761ef5a6278ecf53c88c83155c1c61cee101afea8d
-
SSDEEP
3072:mLjEvw617PwTBXWjFGT4YpBiF+6J4zTBJ3a2mGYiv05ZxKauhEh:T17aBGjFg4YpBiF+6yzDK1ioxKauQ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-