General
-
Target
44fde9646a83ab67cb1d65393213cf234cc5e167d00734d274b246ab1c7ff7c8
-
Size
398KB
-
Sample
240620-vvlt2ashrq
-
MD5
efdf1bf0aa00924eeda227d2a667402c
-
SHA1
12c7f32221997fb6d755652b393b40c3cfef13a8
-
SHA256
44fde9646a83ab67cb1d65393213cf234cc5e167d00734d274b246ab1c7ff7c8
-
SHA512
72742658e76ada5619cfd70bc7150badc407773a879a79e38c3212089bc3c08df52a98ed387775ac4df73fed8bb1dd48ad051ad39e5c819f1b3f635450f7e99c
-
SSDEEP
3072:qKHcLcbe81I1VqTt1ib6EKrHYsaOIC4qJ2+fqYzheNRcbKPtnJMQLvmql/QimROO:qK8Lcbeu+eQbdKr3IwNhG3PtnW+vOO+
Static task
static1
Behavioral task
behavioral1
Sample
44fde9646a83ab67cb1d65393213cf234cc5e167d00734d274b246ab1c7ff7c8.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
gcleaner
185.172.128.90
5.42.64.56
185.172.128.69
Targets
-
-
Target
44fde9646a83ab67cb1d65393213cf234cc5e167d00734d274b246ab1c7ff7c8
-
Size
398KB
-
MD5
efdf1bf0aa00924eeda227d2a667402c
-
SHA1
12c7f32221997fb6d755652b393b40c3cfef13a8
-
SHA256
44fde9646a83ab67cb1d65393213cf234cc5e167d00734d274b246ab1c7ff7c8
-
SHA512
72742658e76ada5619cfd70bc7150badc407773a879a79e38c3212089bc3c08df52a98ed387775ac4df73fed8bb1dd48ad051ad39e5c819f1b3f635450f7e99c
-
SSDEEP
3072:qKHcLcbe81I1VqTt1ib6EKrHYsaOIC4qJ2+fqYzheNRcbKPtnJMQLvmql/QimROO:qK8Lcbeu+eQbdKr3IwNhG3PtnW+vOO+
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-