General
-
Target
de97a4d0b11f6c154e45b5742973f96e8c93ffc191094a9d354040a5ae7d6c34
-
Size
329KB
-
Sample
240527-hnhgtabe9x
-
MD5
6491ec9b1f1c4d5722fbc7d4fb86ab1d
-
SHA1
4e7f7543deb3f5b5f561fab4b177df68f33b6230
-
SHA256
de97a4d0b11f6c154e45b5742973f96e8c93ffc191094a9d354040a5ae7d6c34
-
SHA512
c740b924592058ba8704dd217cd67fde7e8adef54a978cc9cbf2fec96fd50e620e56ae24de93a6f8c1e8227252bcec8ea77f1287e107db0814be89d52d426bef
-
SSDEEP
6144:T+LZz11VbxdQNHMaAcmghru/Y1vLhtOG:T+/rbxOHAFghtLLO
Static task
static1
Behavioral task
behavioral1
Sample
de97a4d0b11f6c154e45b5742973f96e8c93ffc191094a9d354040a5ae7d6c34.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
de97a4d0b11f6c154e45b5742973f96e8c93ffc191094a9d354040a5ae7d6c34
-
Size
329KB
-
MD5
6491ec9b1f1c4d5722fbc7d4fb86ab1d
-
SHA1
4e7f7543deb3f5b5f561fab4b177df68f33b6230
-
SHA256
de97a4d0b11f6c154e45b5742973f96e8c93ffc191094a9d354040a5ae7d6c34
-
SHA512
c740b924592058ba8704dd217cd67fde7e8adef54a978cc9cbf2fec96fd50e620e56ae24de93a6f8c1e8227252bcec8ea77f1287e107db0814be89d52d426bef
-
SSDEEP
6144:T+LZz11VbxdQNHMaAcmghru/Y1vLhtOG:T+/rbxOHAFghtLLO
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-