General
-
Target
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
-
Size
369KB
-
Sample
240528-fectvsgb62
-
MD5
d13d52fa632b4c6606b7874fc6733e28
-
SHA1
091b649bdd1ee951face5c07adde64fe29838216
-
SHA256
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
-
SHA512
17e0fc87f0d4d0024d210d267aa9aeadf1bbab40933fef040a19a34b7cb86d0fe93c61e060971e81209807ee4807236500194bf6aeb483cac4492a995af6c165
-
SSDEEP
6144:VST5HihCi8OLdnmSzu2f5JeEhNBlG7LTlcM:VGHni8OpnmSVe5VcM
Static task
static1
Behavioral task
behavioral1
Sample
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
-
Size
369KB
-
MD5
d13d52fa632b4c6606b7874fc6733e28
-
SHA1
091b649bdd1ee951face5c07adde64fe29838216
-
SHA256
5e8ba08b4ed7c18743fa6408c6aba9995d6073a38a6e8bf4f20f962aa84e9b25
-
SHA512
17e0fc87f0d4d0024d210d267aa9aeadf1bbab40933fef040a19a34b7cb86d0fe93c61e060971e81209807ee4807236500194bf6aeb483cac4492a995af6c165
-
SSDEEP
6144:VST5HihCi8OLdnmSzu2f5JeEhNBlG7LTlcM:VGHni8OpnmSVe5VcM
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-