General
-
Target
4f7bf1545e6acda0f4911fc757c692d84d13fcc37ba54590a4e2b9cc98a46803
-
Size
344KB
-
Sample
240527-3aaj9sdg2v
-
MD5
68e107b88b8af9e541db9d9bcf613c11
-
SHA1
8613a063f955d5ad73d362846aa920d85c000f80
-
SHA256
4f7bf1545e6acda0f4911fc757c692d84d13fcc37ba54590a4e2b9cc98a46803
-
SHA512
727d99e099a703fc9c757b45eda7f3d437e98195e089e7a51369b370fb981f8e7189a17e3639605ded0771cc024bcfd739932af804b6fff8af2db35bb963c931
-
SSDEEP
6144:mMmO2wzAQk6MXH9BRJDuETz6t7cWnAvbBLTe:xBtnM3Ldu7cDvb
Static task
static1
Behavioral task
behavioral1
Sample
4f7bf1545e6acda0f4911fc757c692d84d13fcc37ba54590a4e2b9cc98a46803.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
4f7bf1545e6acda0f4911fc757c692d84d13fcc37ba54590a4e2b9cc98a46803
-
Size
344KB
-
MD5
68e107b88b8af9e541db9d9bcf613c11
-
SHA1
8613a063f955d5ad73d362846aa920d85c000f80
-
SHA256
4f7bf1545e6acda0f4911fc757c692d84d13fcc37ba54590a4e2b9cc98a46803
-
SHA512
727d99e099a703fc9c757b45eda7f3d437e98195e089e7a51369b370fb981f8e7189a17e3639605ded0771cc024bcfd739932af804b6fff8af2db35bb963c931
-
SSDEEP
6144:mMmO2wzAQk6MXH9BRJDuETz6t7cWnAvbBLTe:xBtnM3Ldu7cDvb
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-