Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

03275999.exe

windows7-x64

10

03275999.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03275999.exe

  • Size

    330KB

  • Sample

    230612-ntgelace2t

  • MD5

    17707edc41cafb123a032991f7ad8ae8

  • SHA1

    7f25b192fc3048a7331af794fada4c736fa80785

  • SHA256

    7bce4ecdba0dec6ad52286615c8dc344bf7800e390f811dcb21ec4c42c1c9768

  • SHA512

    7ef94beaeec1e1d4e0974f3dd863fb22152d23b021b7431774750f014397d450b7e6ec2c72d76534b4e8fee0f8dc3e1e01af1716c8793401ee63bc5908804109

  • SSDEEP

    6144:6DAYiXhWENbXMmG17DA5MDaOFItvkwygix4ILjpISZ862ayRDgU:6kYiR7DMmApHSNtygix4QjpTv2a8

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      03275999.exe

    • Size

      330KB

    • MD5

      17707edc41cafb123a032991f7ad8ae8

    • SHA1

      7f25b192fc3048a7331af794fada4c736fa80785

    • SHA256

      7bce4ecdba0dec6ad52286615c8dc344bf7800e390f811dcb21ec4c42c1c9768

    • SHA512

      7ef94beaeec1e1d4e0974f3dd863fb22152d23b021b7431774750f014397d450b7e6ec2c72d76534b4e8fee0f8dc3e1e01af1716c8793401ee63bc5908804109

    • SSDEEP

      6144:6DAYiXhWENbXMmG17DA5MDaOFItvkwygix4ILjpISZ862ayRDgU:6kYiR7DMmApHSNtygix4QjpTv2a8

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks