General
-
Target
a6dc82722bd8dea7d2f969094c178967eb590fb08c260e7a5c00e7f69489b35f
-
Size
345KB
-
Sample
240527-xypq7seg4w
-
MD5
870fde4ecb883ea981f9f7edb90e4d83
-
SHA1
9570185a599c1423f9dc389536300d4d138dea21
-
SHA256
a6dc82722bd8dea7d2f969094c178967eb590fb08c260e7a5c00e7f69489b35f
-
SHA512
409f04049daeb75d092fccfbafb494c7fb4f8a0d7fb21f3285d5526b52ba9bad393c40ec7e5a2a468d717a39f6fc2ffb236c143a792211410fd07723e8518967
-
SSDEEP
6144:ZpvCQ3CKPlL6+iEG6WnAB+pcNdMEGZWrLT/:7vCQSiWgGBmNdMBo
Static task
static1
Behavioral task
behavioral1
Sample
a6dc82722bd8dea7d2f969094c178967eb590fb08c260e7a5c00e7f69489b35f.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
a6dc82722bd8dea7d2f969094c178967eb590fb08c260e7a5c00e7f69489b35f
-
Size
345KB
-
MD5
870fde4ecb883ea981f9f7edb90e4d83
-
SHA1
9570185a599c1423f9dc389536300d4d138dea21
-
SHA256
a6dc82722bd8dea7d2f969094c178967eb590fb08c260e7a5c00e7f69489b35f
-
SHA512
409f04049daeb75d092fccfbafb494c7fb4f8a0d7fb21f3285d5526b52ba9bad393c40ec7e5a2a468d717a39f6fc2ffb236c143a792211410fd07723e8518967
-
SSDEEP
6144:ZpvCQ3CKPlL6+iEG6WnAB+pcNdMEGZWrLT/:7vCQSiWgGBmNdMBo
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-