Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

5a4b55518b...38.exe

windows7-x64

10

5a4b55518b...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a4b55518be11f6aed4f11286f64d238.exe

  • Size

    432KB

  • Sample

    230414-mbcs1shd99

  • MD5

    5a4b55518be11f6aed4f11286f64d238

  • SHA1

    a7a18544b746456084dbb1d109ac3ae1be8a80a6

  • SHA256

    da639a877dc33fe3de6d5a0488918748a75c674e1b2e20cfc87b79c4723df3b4

  • SHA512

    09273716ed19b1d43900a853cfe44dcaaf68380d7f763006daf482a713c348f74767afa05c3909f2703ee16ec793fcd29d14339effe7f237f1d0feb66702b80c

  • SSDEEP

    12288:8iDB727OD5FoTE5F/w1UnLpFoz7VHv3b:8+BSy4TEfwCnLIRP

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      5a4b55518be11f6aed4f11286f64d238.exe

    • Size

      432KB

    • MD5

      5a4b55518be11f6aed4f11286f64d238

    • SHA1

      a7a18544b746456084dbb1d109ac3ae1be8a80a6

    • SHA256

      da639a877dc33fe3de6d5a0488918748a75c674e1b2e20cfc87b79c4723df3b4

    • SHA512

      09273716ed19b1d43900a853cfe44dcaaf68380d7f763006daf482a713c348f74767afa05c3909f2703ee16ec793fcd29d14339effe7f237f1d0feb66702b80c

    • SSDEEP

      12288:8iDB727OD5FoTE5F/w1UnLpFoz7VHv3b:8+BSy4TEfwCnLIRP

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks