Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 23:49
General
-
Target
20979853553bb74161a52d0c828ad65e.exe
-
Size
309KB
-
MD5
20979853553bb74161a52d0c828ad65e
-
SHA1
8859eeeac71eb9a06911f933a7be0f7a4f8cd084
-
SHA256
dac18006bb58f654499575066266f7c455fe9bdafe23b7c54c41dd513a0b2756
-
SHA512
c063e1df3ec41a8c573ea40c6993bcbf4bc7be254753bdfec025f2a3bb795cee127ac2857c2a9690f0e1ccbb910301eb16bc26b08045d5ecb9e92ec81ed6aeb2
-
SSDEEP
6144:00zJFRaJtS+WwPAoyIi2WRKX5qmT3UnYzDEJiQ:1/aJtS+bAoyV2WRiqSl8
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20979853553bb74161a52d0c828ad65e.exe"C:\Users\Admin\AppData\Local\Temp\20979853553bb74161a52d0c828ad65e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
1024KB
-
Filesize
39.3MB
-
Filesize
39.3MB
-
Filesize
1024KB