Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

1e0c042590...18.exe

windows7-x64

10

1e0c042590...18.exe

windows10-2004-x64

10

Resubmissions

19/04/2023, 10:12

230419-l8kdpabf9z 10

19/04/2023, 09:14

230419-k7qcwahe75 10

18/04/2023, 11:36

230418-nqkylsch3z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e0c04259041599f381739e5a2779118.exe

  • Size

    282KB

  • Sample

    230419-k7qcwahe75

  • MD5

    1e0c04259041599f381739e5a2779118

  • SHA1

    4aeec9e7e2d836ef69145a8451410b49d7ee8139

  • SHA256

    71dfa64187315a09becab456d32e70e43ae68afbff5a601a9227089241b9c460

  • SHA512

    bb1f4f064a0f7da8a7cf2aae2f7eb8687bf8f4861e168a97c4e31bced31341d552419bc96d254e11237c1227fc3836ebc802eff7af6a399a2bab62b94d3e275d

  • SSDEEP

    3072:kcJiBxMfexCJCzAU0tPjv4UVA3oG+dHLnVTuX2kmo5ugsFWrO7CCFpPsOmmh16Pq:axaUCJCIjASGoGoOMF7+QpppObl7iM

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      1e0c04259041599f381739e5a2779118.exe

    • Size

      282KB

    • MD5

      1e0c04259041599f381739e5a2779118

    • SHA1

      4aeec9e7e2d836ef69145a8451410b49d7ee8139

    • SHA256

      71dfa64187315a09becab456d32e70e43ae68afbff5a601a9227089241b9c460

    • SHA512

      bb1f4f064a0f7da8a7cf2aae2f7eb8687bf8f4861e168a97c4e31bced31341d552419bc96d254e11237c1227fc3836ebc802eff7af6a399a2bab62b94d3e275d

    • SSDEEP

      3072:kcJiBxMfexCJCzAU0tPjv4UVA3oG+dHLnVTuX2kmo5ugsFWrO7CCFpPsOmmh16Pq:axaUCJCIjASGoGoOMF7+QpppObl7iM

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks