Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
- submitted
03/02/2024, 17:13
General
- Target e9baea523323585c1d2afbe37bb0f40d.exe
- Size 296KB
- Sample240203-vreasagfbj
- SHA256 899e8cc40f6b47f84fe400dff238fa0b91205aa15e1d2ee935947dfb0e4b1be1
Score
10/10
Malware Config
Extracted
Family
-
gcleaner
C2
-
185.172.128.90
-
5.42.64.3
-
5.42.65.115
Signatures
- GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
- Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9baea523323585c1d2afbe37bb0f40d.exe"C:\Users\Admin\AppData\Local\Temp\e9baea523323585c1d2afbe37bb0f40d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/944-1-0x00000000002B0000-0x00000000003B0000-memory.dmp
memory/944-3-0x0000000000400000-0x0000000000459000-memory.dmp
memory/944-2-0x00000000001B0000-0x00000000001EC000-memory.dmp
memory/944-6-0x00000000002B0000-0x00000000003B0000-memory.dmp
memory/944-9-0x0000000000400000-0x0000000000459000-memory.dmp
memory/944-10-0x00000000002B0000-0x00000000003B0000-memory.dmp