Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

027f5be3a4...b1.exe

windows7-x64

10

027f5be3a4...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78bc9e6b8f54759b0e794f53ef3cdb1a.bin

  • Size

    2.9MB

  • Sample

    230215-bs29fshd58

  • MD5

    adc001de063cc2955281b21d9f704f91

  • SHA1

    80acca26a3646e3dd23d6d37689941facadadd16

  • SHA256

    0acf38bc2948ee9e7e71af7c272e017a22a9feed7201f8656d72e6d6dc6674ac

  • SHA512

    1f82109c67b09c54379273a53198f177208b80a68bf6b0f348e075a236773ad2eaa7716271f4ecd4e41bca6f1b76317caa3668ed50339b2285bdf21fc8f484d0

  • SSDEEP

    49152:V7pZWnXlMWjCqWoFXftTdCMwr1JyjPWrayuTFrq1Sxk4+A48hm4vbT+Z:FyuWjCqBtTUMwr1YWrf202ttY4T+Z

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      027f5be3a4581f03ae89654c543504913f6d8e0cde4a8ccf9f10088097d2f8b1.exe

    • Size

      3.2MB

    • MD5

      78bc9e6b8f54759b0e794f53ef3cdb1a

    • SHA1

      a09e556df5d1e0317d457d87ef6c890fdd565750

    • SHA256

      027f5be3a4581f03ae89654c543504913f6d8e0cde4a8ccf9f10088097d2f8b1

    • SHA512

      c6c0b9964de956ecf564aed4cb79312c348ae0a3627dffcc088812687fc283d2ba1985b14231a03299621ead4b80a352fcc758ed32ae35735a2d689a5d40c238

    • SSDEEP

      98304:JH6lBpoF4mZmTiwxb/PCsFJa8nwlTvPyMZC9Iv2MR:d6l/oF406iwF/qsztwlbZC9IvjR

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks