General
-
Target
c9d8503b7fc83720447ab6f5bb00c2844417eb415129af3438f9f933f43d44c2
-
Size
362KB
-
Sample
240621-a63lpsyajk
-
MD5
bcb19d0d8c67d09189350dcb304bcad8
-
SHA1
8ee52d59f418ef462835ce99036feaefde6782a7
-
SHA256
c9d8503b7fc83720447ab6f5bb00c2844417eb415129af3438f9f933f43d44c2
-
SHA512
bff7a51690dbc79c8d5813568bea718da50ef450d6c5fd681b3432d7ea31e47e80e0e0cd8caeb1921107cf11b86935f07606f9d7971776ba05b87e161b0ab2c5
-
SSDEEP
6144:Vc6L1LQgGOtgTd69zyGVIu/EiRZd4J1BJ1QPg2X:T5kgGOtSdayQIGrRZ6Bp
Static task
static1
Behavioral task
behavioral1
Sample
c9d8503b7fc83720447ab6f5bb00c2844417eb415129af3438f9f933f43d44c2.exe
Resource
win7-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
185.172.128.69
-
url_path
/advdlc.php
Targets
-
-
Target
c9d8503b7fc83720447ab6f5bb00c2844417eb415129af3438f9f933f43d44c2
-
Size
362KB
-
MD5
bcb19d0d8c67d09189350dcb304bcad8
-
SHA1
8ee52d59f418ef462835ce99036feaefde6782a7
-
SHA256
c9d8503b7fc83720447ab6f5bb00c2844417eb415129af3438f9f933f43d44c2
-
SHA512
bff7a51690dbc79c8d5813568bea718da50ef450d6c5fd681b3432d7ea31e47e80e0e0cd8caeb1921107cf11b86935f07606f9d7971776ba05b87e161b0ab2c5
-
SSDEEP
6144:Vc6L1LQgGOtgTd69zyGVIu/EiRZd4J1BJ1QPg2X:T5kgGOtSdayQIGrRZ6Bp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-