General
-
Target
78bb6a9c80326a310dcc3ee3ab3a9571786450ac2265185ae7e455306f3135a6
-
Size
282KB
-
Sample
240621-ksnkqsxdpr
-
MD5
6ede38a264ebe765689296c69b8847d5
-
SHA1
bad52ed278285f200fc3f39efc50972ac06aea9a
-
SHA256
78bb6a9c80326a310dcc3ee3ab3a9571786450ac2265185ae7e455306f3135a6
-
SHA512
68aa730c31845e4bb94106b6eb11989c24cabf7d98a0a2d1a6560055bcf0e16f4583b184071d46d8f2e6c192d3534b2a844362b6982d6cb92065259bfd777836
-
SSDEEP
3072:a1sybusrXoPo2GaGD+TkCYDGKMNDQDsUAOUD/k1PHJWj473QSCVvhgw/M87z2:oDiWXoAcGkkeaLAFQ1HWUQSo/
Static task
static1
Behavioral task
behavioral1
Sample
78bb6a9c80326a310dcc3ee3ab3a9571786450ac2265185ae7e455306f3135a6.exe
Resource
win7-20240508-en
Malware Config
Extracted
gcleaner
185.172.128.90
185.172.128.69
-
url_path
/advdlc.php
Targets
-
-
Target
78bb6a9c80326a310dcc3ee3ab3a9571786450ac2265185ae7e455306f3135a6
-
Size
282KB
-
MD5
6ede38a264ebe765689296c69b8847d5
-
SHA1
bad52ed278285f200fc3f39efc50972ac06aea9a
-
SHA256
78bb6a9c80326a310dcc3ee3ab3a9571786450ac2265185ae7e455306f3135a6
-
SHA512
68aa730c31845e4bb94106b6eb11989c24cabf7d98a0a2d1a6560055bcf0e16f4583b184071d46d8f2e6c192d3534b2a844362b6982d6cb92065259bfd777836
-
SSDEEP
3072:a1sybusrXoPo2GaGD+TkCYDGKMNDQDsUAOUD/k1PHJWj473QSCVvhgw/M87z2:oDiWXoAcGkkeaLAFQ1HWUQSo/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-