General
-
Target
560c018107dca5f6a0978f77a9ba31508c99a64ff33401fa96275e4e8c5cdb78
-
Size
330KB
-
Sample
240527-k7hm2aeg5s
-
MD5
dfa6c3aae8074b14b37241fdb6b80e53
-
SHA1
47c15f6cf9d712d499ccc7ac2ce60e3574a7db88
-
SHA256
560c018107dca5f6a0978f77a9ba31508c99a64ff33401fa96275e4e8c5cdb78
-
SHA512
ca9865a68484b0be4255d300b81c3f0c3916341ca142c97891a30acd912de7e4292de68469ec175d48a64076184584c550385f48d5880e5445b0fb587f5dd1b2
-
SSDEEP
6144:1+L3Tm7juPtL3J/oZ+mjL/ZTdN9yn7QUgeP:1+W7qPtL+Z+MhnS7Z
Static task
static1
Behavioral task
behavioral1
Sample
560c018107dca5f6a0978f77a9ba31508c99a64ff33401fa96275e4e8c5cdb78.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
560c018107dca5f6a0978f77a9ba31508c99a64ff33401fa96275e4e8c5cdb78
-
Size
330KB
-
MD5
dfa6c3aae8074b14b37241fdb6b80e53
-
SHA1
47c15f6cf9d712d499ccc7ac2ce60e3574a7db88
-
SHA256
560c018107dca5f6a0978f77a9ba31508c99a64ff33401fa96275e4e8c5cdb78
-
SHA512
ca9865a68484b0be4255d300b81c3f0c3916341ca142c97891a30acd912de7e4292de68469ec175d48a64076184584c550385f48d5880e5445b0fb587f5dd1b2
-
SSDEEP
6144:1+L3Tm7juPtL3J/oZ+mjL/ZTdN9yn7QUgeP:1+W7qPtL+Z+MhnS7Z
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-