Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2023, 00:13

General

  • Target

    95b1ed7c7d4f073308b5602a10f3465b306e7af9a0dfbb0124bcadddc332002c.exe

  • Size

    3.4MB

  • MD5

    45632e1b7df8081fb3bbcf9a4a140cde

  • SHA1

    93a98eab4fa25962e61e93ad39ed317d7eebd7c4

  • SHA256

    95b1ed7c7d4f073308b5602a10f3465b306e7af9a0dfbb0124bcadddc332002c

  • SHA512

    d879fe55971f4e2b5b40b05305f3bfcb73311adc02ebee427d53daae9bf7a0c084a1f6e9984ca5aa4befe026b174531e13660ab096f77973f07d557ebcdd9d32

  • SSDEEP

    49152:PPQF3Mbvh7HcSsPbYLjF67dgnS5ShEXSGdN3oRkvY0L9:nicVcSszYLjF67TYuXSKN3oRkQ0h

Score
10/10

Malware Config

Signatures

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

  • Downloads MZ/PE file

Processes

  • C:\Users\Admin\AppData\Local\Temp\95b1ed7c7d4f073308b5602a10f3465b306e7af9a0dfbb0124bcadddc332002c.exe
    "C:\Users\Admin\AppData\Local\Temp\95b1ed7c7d4f073308b5602a10f3465b306e7af9a0dfbb0124bcadddc332002c.exe"
    1⤵
      PID:5040

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5040-0-0x0000000000400000-0x0000000001567000-memory.dmp

      Filesize

      17.4MB

    • memory/5040-1-0x0000000000400000-0x0000000001567000-memory.dmp

      Filesize

      17.4MB

    • memory/5040-2-0x0000000000400000-0x0000000001567000-memory.dmp

      Filesize

      17.4MB

    • memory/5040-8-0x0000000000400000-0x0000000001567000-memory.dmp

      Filesize

      17.4MB