General
-
Target
e13a6ed125d5bd3fed3ade3398ecd2c0e05cae4536ba92b8b84e4b4b411667d3
-
Size
369KB
-
Sample
240528-3kf5ssab44
-
MD5
cf8d80b2745d787e501dd1276a3338e7
-
SHA1
71dcf4c136afa0bf50b5ac85c7889bc9d1a662b4
-
SHA256
e13a6ed125d5bd3fed3ade3398ecd2c0e05cae4536ba92b8b84e4b4b411667d3
-
SHA512
9103c0fc4ffe2c528c5c80772e086e40790445e4f229d7f8aae46f3293d010ff903cb64b34cd72f84d8d4d072ea39daa4a83192fd6c13e4be4469768eb4a8d9a
-
SSDEEP
6144:Kj3kadZcpEcplxj7Cbbll/HsNve9o/6j0ZTb+el:Kj3JZcpEc3pCbblpu6gZx
Static task
static1
Behavioral task
behavioral1
Sample
e13a6ed125d5bd3fed3ade3398ecd2c0e05cae4536ba92b8b84e4b4b411667d3.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
e13a6ed125d5bd3fed3ade3398ecd2c0e05cae4536ba92b8b84e4b4b411667d3
-
Size
369KB
-
MD5
cf8d80b2745d787e501dd1276a3338e7
-
SHA1
71dcf4c136afa0bf50b5ac85c7889bc9d1a662b4
-
SHA256
e13a6ed125d5bd3fed3ade3398ecd2c0e05cae4536ba92b8b84e4b4b411667d3
-
SHA512
9103c0fc4ffe2c528c5c80772e086e40790445e4f229d7f8aae46f3293d010ff903cb64b34cd72f84d8d4d072ea39daa4a83192fd6c13e4be4469768eb4a8d9a
-
SSDEEP
6144:Kj3kadZcpEcplxj7Cbbll/HsNve9o/6j0ZTb+el:Kj3JZcpEc3pCbblpu6gZx
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-