Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5941ecae13...cc.exe

windows7-x64

10

5941ecae13...cc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5941ecae13f8fec59620321dfa31d3cc

  • Size

    323KB

  • Sample

    240113-vn5zbsdgg8

  • MD5

    5941ecae13f8fec59620321dfa31d3cc

  • SHA1

    c70bb8b9db75b34e1f52d0368ba015ad61c06221

  • SHA256

    24e05c6c8e0e360207b94dd932bf57a5b0bc4b6a9e4ca72964ffe64c731956a1

  • SHA512

    a66699e82745e9c10c0e0e660cf7f7e96dad7a4fa79e29e61cafa6cb3e22331e9203560ecfc8d4a3ed965377c0b41d9ac8550a74e877e7da70c4597b1801f7c9

  • SSDEEP

    6144:gbaeJBcuZLM9W2OaTJcU2n7M27rT/roxuCCqu9WM3c:MfcudM9W8TJcd7M27XTo8Cj

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      5941ecae13f8fec59620321dfa31d3cc

    • Size

      323KB

    • MD5

      5941ecae13f8fec59620321dfa31d3cc

    • SHA1

      c70bb8b9db75b34e1f52d0368ba015ad61c06221

    • SHA256

      24e05c6c8e0e360207b94dd932bf57a5b0bc4b6a9e4ca72964ffe64c731956a1

    • SHA512

      a66699e82745e9c10c0e0e660cf7f7e96dad7a4fa79e29e61cafa6cb3e22331e9203560ecfc8d4a3ed965377c0b41d9ac8550a74e877e7da70c4597b1801f7c9

    • SSDEEP

      6144:gbaeJBcuZLM9W2OaTJcU2n7M27rT/roxuCCqu9WM3c:MfcudM9W8TJcd7M27XTo8Cj

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks