General
-
Target
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
-
Size
267KB
-
Sample
240621-m8hersxcjc
-
MD5
758ef3ac70bed09148f5afde3f920008
-
SHA1
98631abb82801bd19df3c9ed19688464c9131915
-
SHA256
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
-
SHA512
a55e3aae3f531f5ce5be6165aa3d9d7c72785acd58e20b01204a49a9ca7b41e4a20b7fd02d58f69d7af39ec5baa406bc09a7f2c55e79307d05d4a5c5318ed715
-
SSDEEP
3072:zWG8bdodavOTlIV+2WMEf8QyKRqgZP9FO8DI0TS/AY6gw/M87z2:zl8bdOxIUJFp9k8DHt/
Static task
static1
Behavioral task
behavioral1
Sample
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862.exe
Resource
win7-20240419-en
Malware Config
Extracted
gcleaner
185.172.128.90
185.172.128.69
-
url_path
/advdlc.php
Targets
-
-
Target
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
-
Size
267KB
-
MD5
758ef3ac70bed09148f5afde3f920008
-
SHA1
98631abb82801bd19df3c9ed19688464c9131915
-
SHA256
04cd9eda36e091e9d49917d57852970587b38ac173d58c021e4573968fa35862
-
SHA512
a55e3aae3f531f5ce5be6165aa3d9d7c72785acd58e20b01204a49a9ca7b41e4a20b7fd02d58f69d7af39ec5baa406bc09a7f2c55e79307d05d4a5c5318ed715
-
SSDEEP
3072:zWG8bdodavOTlIV+2WMEf8QyKRqgZP9FO8DI0TS/AY6gw/M87z2:zl8bdOxIUJFp9k8DHt/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-