Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    589f9841822ba66abe4cf94fc3f104307d13014de6d3ed4bc507873fe0653e2e

  • Size

    304KB

  • Sample

    230707-d65mvagc3s

  • MD5

    b59c8093621b9d5b5ad1905fab5aee00

  • SHA1

    e36627f6faaee192a2ab8f4d6e7ccad03409e306

  • SHA256

    589f9841822ba66abe4cf94fc3f104307d13014de6d3ed4bc507873fe0653e2e

  • SHA512

    8e6ded0e24a587bd10c91ca62dd52e0f0418207484a32c407ce625c6e3af7d0963dc728caeec153c79a94e6be07d4bd4edd8c3bb4e4e6ed20fab5d4a84e8bc72

  • SSDEEP

    6144:i083LPjsNIaUNNsEdX/k5+qgRxx4xwdmJLaTZoA:N837js+bjX4SD4i0KKA

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      589f9841822ba66abe4cf94fc3f104307d13014de6d3ed4bc507873fe0653e2e

    • Size

      304KB

    • MD5

      b59c8093621b9d5b5ad1905fab5aee00

    • SHA1

      e36627f6faaee192a2ab8f4d6e7ccad03409e306

    • SHA256

      589f9841822ba66abe4cf94fc3f104307d13014de6d3ed4bc507873fe0653e2e

    • SHA512

      8e6ded0e24a587bd10c91ca62dd52e0f0418207484a32c407ce625c6e3af7d0963dc728caeec153c79a94e6be07d4bd4edd8c3bb4e4e6ed20fab5d4a84e8bc72

    • SSDEEP

      6144:i083LPjsNIaUNNsEdX/k5+qgRxx4xwdmJLaTZoA:N837js+bjX4SD4i0KKA

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks