Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05-03-2024 23:43
General
-
Target
b5f49db3a9a421773d2eeade6f52bb33.exe
-
Size
254KB
-
MD5
b5f49db3a9a421773d2eeade6f52bb33
-
SHA1
08dfa30ef726c80d85e4d803b348a418cf0cadc1
-
SHA256
5049169b6ddfd46c25ef01b29a760453ac36534b7e033364a297be7efeaa6fc8
-
SHA512
2078ce819db2f3e6403e2d9f4822dffdd2cd9857cca41cb391c28675265d8e6af9ffc5df00ad4a9fae01628656e4cdf3a1fe02dadd683c6c015bda8ae92066ec
-
SSDEEP
6144:vRLAO5dsfvu4FmAejqCHa/RVSV2RVn+Jc/m/:vREO5r4kAEqJ5VSV2RP
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5f49db3a9a421773d2eeade6f52bb33.exe"C:\Users\Admin\AppData\Local\Temp\b5f49db3a9a421773d2eeade6f52bb33.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
192KB
-
Filesize
40.8MB
-
Filesize
40.8MB
-
Filesize
1024KB
-
Filesize
192KB