Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-03-2024 19:32
General
-
Target
b2ee4be32e821e43740b761c9af6f2b3.exe
-
Size
287KB
-
MD5
b2ee4be32e821e43740b761c9af6f2b3
-
SHA1
145034842e7117eb3d3fdbaf2045317e63a905a3
-
SHA256
b5abf9dbae00955215b4a5b71726fad90bfa64111603707e468d764c7c4ac470
-
SHA512
3ffa3bf94a3ab97c847096c6446ac51cd9b8feaecb820678845d147654fcdb25414611a05fe8ec5b78b22774c8bdcb72f1cf1e470ab0321123e4e4f6493436c6
-
SSDEEP
6144:hHiM0Z3LxnW7qh8phWwP2p+T+WKl6UeY7THlQz7yq:j0R1W7qhlwP2wAneY7THlSZ
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2ee4be32e821e43740b761c9af6f2b3.exe"C:\Users\Admin\AppData\Local\Temp\b2ee4be32e821e43740b761c9af6f2b3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
188KB
-
Filesize
29.4MB
-
Filesize
29.4MB
-
Filesize
1024KB