General
-
Target
ea1e808bc3d4a1d7c5d124dc5738c45f0e18a68e32ad5061ed85d98cc6d36681
-
Size
270KB
-
Sample
240522-fgw1hscd96
-
MD5
d6dbc50e09cbef9c6f44d97e438825c3
-
SHA1
a38a811d398fc5c83bd2793c9745b19ac140c424
-
SHA256
ea1e808bc3d4a1d7c5d124dc5738c45f0e18a68e32ad5061ed85d98cc6d36681
-
SHA512
063d626130211d1842c2e40febab5429e676291ba3e78ca7b6574237fb147ffe30be4d08f701ae5d2b25c6e8318413588e676ce6776a1879de2e50b30d61094b
-
SSDEEP
6144:m6jwR/M06HyBqtATzSC8Y6S0o7yYtIsnkDmXT+Y:m6j4/b6HyzILuyYvnr
Static task
static1
Behavioral task
behavioral1
Sample
ea1e808bc3d4a1d7c5d124dc5738c45f0e18a68e32ad5061ed85d98cc6d36681.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
ea1e808bc3d4a1d7c5d124dc5738c45f0e18a68e32ad5061ed85d98cc6d36681
-
Size
270KB
-
MD5
d6dbc50e09cbef9c6f44d97e438825c3
-
SHA1
a38a811d398fc5c83bd2793c9745b19ac140c424
-
SHA256
ea1e808bc3d4a1d7c5d124dc5738c45f0e18a68e32ad5061ed85d98cc6d36681
-
SHA512
063d626130211d1842c2e40febab5429e676291ba3e78ca7b6574237fb147ffe30be4d08f701ae5d2b25c6e8318413588e676ce6776a1879de2e50b30d61094b
-
SSDEEP
6144:m6jwR/M06HyBqtATzSC8Y6S0o7yYtIsnkDmXT+Y:m6j4/b6HyzILuyYvnr
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-