General
-
Target
7b641889fc73e71d112b0b8f9e03de3384558070fe4c7f354d071ed6362ccf99
-
Size
269KB
-
Sample
240522-xrp4dsdb48
-
MD5
a58ee0c97dc9c6c85542a90689d2cb11
-
SHA1
054586b8f63bbb02c639e3fbcae39a1c6cfb837a
-
SHA256
7b641889fc73e71d112b0b8f9e03de3384558070fe4c7f354d071ed6362ccf99
-
SHA512
b9266b555b649240ac3b1d51ff764c9bbeb46eca83e0739b90098f975d72b8e592d43a27f161ea350bbaa44801b96661d91ca23dde1e07bfac3bb6155c7f979a
-
SSDEEP
6144:JL+i29cfqr8XX5hlIGu3yA3er/ixYFZc62S:JLv290AyX5hlmfur/AWvX
Static task
static1
Behavioral task
behavioral1
Sample
7b641889fc73e71d112b0b8f9e03de3384558070fe4c7f354d071ed6362ccf99.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
7b641889fc73e71d112b0b8f9e03de3384558070fe4c7f354d071ed6362ccf99
-
Size
269KB
-
MD5
a58ee0c97dc9c6c85542a90689d2cb11
-
SHA1
054586b8f63bbb02c639e3fbcae39a1c6cfb837a
-
SHA256
7b641889fc73e71d112b0b8f9e03de3384558070fe4c7f354d071ed6362ccf99
-
SHA512
b9266b555b649240ac3b1d51ff764c9bbeb46eca83e0739b90098f975d72b8e592d43a27f161ea350bbaa44801b96661d91ca23dde1e07bfac3bb6155c7f979a
-
SSDEEP
6144:JL+i29cfqr8XX5hlIGu3yA3er/ixYFZc62S:JLv290AyX5hlmfur/AWvX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-