Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
13/01/2024, 17:09
General
-
Target
5941ecae13f8fec59620321dfa31d3cc.exe
-
Size
323KB
-
MD5
5941ecae13f8fec59620321dfa31d3cc
-
SHA1
c70bb8b9db75b34e1f52d0368ba015ad61c06221
-
SHA256
24e05c6c8e0e360207b94dd932bf57a5b0bc4b6a9e4ca72964ffe64c731956a1
-
SHA512
a66699e82745e9c10c0e0e660cf7f7e96dad7a4fa79e29e61cafa6cb3e22331e9203560ecfc8d4a3ed965377c0b41d9ac8550a74e877e7da70c4597b1801f7c9
-
SSDEEP
6144:gbaeJBcuZLM9W2OaTJcU2n7M27rT/roxuCCqu9WM3c:MfcudM9W8TJcd7M27XTo8Cj
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5941ecae13f8fec59620321dfa31d3cc.exe"C:\Users\Admin\AppData\Local\Temp\5941ecae13f8fec59620321dfa31d3cc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
1024KB
-
Filesize
31.7MB
-
Filesize
31.7MB