Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

7d8069cdf3...79.exe

windows7-x64

10

7d8069cdf3...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dbfe126edb648cb52a7f18c3330ffe9.bin

  • Size

    2.1MB

  • Sample

    230212-bk1qnahf96

  • MD5

    d3539002c498e8039a9a69ebe3474301

  • SHA1

    59704edb850ff2e5b2fd3ff533cd376ae4c53a12

  • SHA256

    42cd24c22ebfecc0c60ad04cb5dec20045a207482f22f88d6beee82f22d4c978

  • SHA512

    eddaea487b9d67f2a9bfb1679dfc2e882c5237ae7d513277b47ab04e3ac02d489e0962ce354642c28103028bb8987610f0e09df578b5381a1ca83ce377d1bf77

  • SSDEEP

    49152:HjacR9kr+UDrTUDmoUIy6xKq0b9oD2TRK7NuSUimKoRchl4:Heko+Uzgm6bKqcH8N3vDoY4

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      7d8069cdf3e75360c4ee42f372fc15f7acac40abf68f97f6641e9fd33d5fc979.exe

    • Size

      2.4MB

    • MD5

      3dbfe126edb648cb52a7f18c3330ffe9

    • SHA1

      f2ad976f10add9db61546739599fe811a1126529

    • SHA256

      7d8069cdf3e75360c4ee42f372fc15f7acac40abf68f97f6641e9fd33d5fc979

    • SHA512

      f764a23e45413c43d48194d95de23f8eab14175b70d3da4946dd547b9fdd5d79fa0de961e0a418c193797619c28cca92b314154b0d7ba35620ee4cfbebeb12f0

    • SSDEEP

      49152:rdH3v4CXCWAk7zImkJoaPg23s8q8HcA8iN33hLSwYMMyjvIGYLwHjAFnUxLCgv2Y:JHRXCMnIr2aPPs+HcA8iN331lwMlHEFM

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks