Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
21/02/2024, 00:19
General
-
Target
a70e11ed1b3aa337c6272b5864769f3c.exe
-
Size
225KB
-
MD5
a70e11ed1b3aa337c6272b5864769f3c
-
SHA1
61ac3e7e94d1b614b401c822e1b07393279a4b95
-
SHA256
f571ec60e80f59ca67e085d6578306da2af3de4e3c9b48714dc20ade153fed35
-
SHA512
a55e4837581a7519fb6c2ce28378f0fed30c568923cb1b337d015640e6f919cc09bcc5392c383c87d2acec4fed53b762aa39bfafcbcec158731d7f4bf6203c66
-
SSDEEP
3072:OVAVoWAdJjShT30saCKi5TeOZtNVQ0lNgijZlHNcumxSjGcrvia0CB67r1Kk3SW:OqV9AXuhTks/Kuf9tlNBjzy/RcrQC4
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a70e11ed1b3aa337c6272b5864769f3c.exe"C:\Users\Admin\AppData\Local\Temp\a70e11ed1b3aa337c6272b5864769f3c.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 13002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1916 -ip 19161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
240KB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
240KB