Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
-
submitted
07-01-2024 18:07
General
-
Target
425b312c607eaa405059b4928a65cba8.exe
-
Size
420KB
-
MD5
425b312c607eaa405059b4928a65cba8
-
SHA1
3caefbcad6d742e8c1849ec2d8ce092c0c75152f
-
SHA256
ea25dcf8f74b1d1094825d695807839f48230a800420cd2c57a05f7f6fe5a5bb
-
SHA512
89d9c201da31815db48bbb0fea5268044a412dac91677f8d9fc9a7ff1b9eec9d0c8b3c864b340148a22cacbd6b2e3a37dbfd94170ccba3d059ee261c402d1fa6
-
SSDEEP
12288:hET5GSUENyq2QSfyrVVM6O83C1+ZOXzh:aTXUENRFlZVMusYOj
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
web-stat.biz
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 1 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\425b312c607eaa405059b4928a65cba8.exe"C:\Users\Admin\AppData\Local\Temp\425b312c607eaa405059b4928a65cba8.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1476 -s 2402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1476 -ip 14761⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
304KB