Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

30c67e476b...9c.exe

windows7-x64

10

30c67e476b...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30c67e476b26bcb2e4bbfa5a6dfce89c.exe

  • Size

    275KB

  • Sample

    230215-qy7tfsbg3w

  • MD5

    30c67e476b26bcb2e4bbfa5a6dfce89c

  • SHA1

    7dd773c04ae06cf57ca00d883b33d0eb1dbecf59

  • SHA256

    04d92877f99c177d348c2c51173303ab27b02989a23c5377105a33394730dfb0

  • SHA512

    dbeec6710dfca8150929fb043dfb44fc9eea2b71b58536e9f3f47bda8189e41ca760759af1d0284a9d88b801f23b97533d69bf0386e2d53eaf7b02b7282e5490

  • SSDEEP

    3072:TqaW5aiXxr+eLjuC0E0kDwIYeHnPRluTb1kzbdV1zrphQvlfXle2OiQaV:TK5a0B+eLjR1YeHntbJRhQvbnOiQ

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      30c67e476b26bcb2e4bbfa5a6dfce89c.exe

    • Size

      275KB

    • MD5

      30c67e476b26bcb2e4bbfa5a6dfce89c

    • SHA1

      7dd773c04ae06cf57ca00d883b33d0eb1dbecf59

    • SHA256

      04d92877f99c177d348c2c51173303ab27b02989a23c5377105a33394730dfb0

    • SHA512

      dbeec6710dfca8150929fb043dfb44fc9eea2b71b58536e9f3f47bda8189e41ca760759af1d0284a9d88b801f23b97533d69bf0386e2d53eaf7b02b7282e5490

    • SSDEEP

      3072:TqaW5aiXxr+eLjuC0E0kDwIYeHnPRluTb1kzbdV1zrphQvlfXle2OiQaV:TK5a0B+eLjR1YeHntbJRhQvbnOiQ

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks