Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

ee0c450732...9e.exe

windows7-x64

10

ee0c450732...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    607febf340242ab0d7f58a082c47fdbf.bin

  • Size

    2.6MB

  • Sample

    230419-b13vysfe55

  • MD5

    cbb6294bde652a16f4f2ed598971453b

  • SHA1

    396b5e1fe60afa88ebfb3502d474389647ff6f4b

  • SHA256

    deae14ea0450cdd17da5b8265398da11816d0b4bc853feac9dc978648e7c4e94

  • SHA512

    68342bba387beb91cd7d0edc00ab9e05c1f89999ed0c88f7ef6d092c485135cfa6b1162370651212496742119945c1245cf6102d32c3b0ea3cf9ea4e9ab07628

  • SSDEEP

    49152:wZXaYX703uoRiLQZm5nwdSHC3KVLbxRSQ2SrJnrt9orwGzJorX8dO6ZK:woYXeu1cZwnoKpxcd+v6wGirX0K

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      ee0c4507323cbdb7411a605690e58c296e8a8624a52ca2f39c00bbf4290baf9e.exe

    • Size

      2.6MB

    • MD5

      607febf340242ab0d7f58a082c47fdbf

    • SHA1

      75e49d23d053a3848d71ee68ed5836f8b9dc3243

    • SHA256

      ee0c4507323cbdb7411a605690e58c296e8a8624a52ca2f39c00bbf4290baf9e

    • SHA512

      d5fb70f0a4d0d82df5f2b3f8bf7890805c02edfa33d8c910f661d9e10b88a85f460055b652cf52094af73987d796195231c8ff9046117ec45a74eda00e022dfe

    • SSDEEP

      49152:zGlJfs2GrxjNBZr0EmlxqMQ+7l9vmA0bXp/TQIBoh6ZbVoWHygU:qerdNBZ4EmTe+7lll0bZTnu8VoWSt

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks