Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/03/2024, 19:43
General
-
Target
e0f1ea62e5847dfeae1cc38ced8852cf3403165657514f09ac80c4263409c6bf.exe
-
Size
252KB
-
MD5
a3e743159de51497eb2e959164d855e9
-
SHA1
8bffe1b26a253914988021e91885a0617277a003
-
SHA256
e0f1ea62e5847dfeae1cc38ced8852cf3403165657514f09ac80c4263409c6bf
-
SHA512
bd358729039676486ed1a79c2d127a0f6ca2230905c366cba111217d7b97919454d291199071eed5cbf5a174f7fd6a517c88ee7e488b752a4d4b6014b6a58797
-
SSDEEP
6144:L2GidPpLSqpCHMYkM6h5Ze37mPUJZoeqwo40XvA:aGULSqgsLMIQ7U/eqT40f
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0f1ea62e5847dfeae1cc38ced8852cf3403165657514f09ac80c4263409c6bf.exe"C:\Users\Admin\AppData\Local\Temp\e0f1ea62e5847dfeae1cc38ced8852cf3403165657514f09ac80c4263409c6bf.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
27.1MB
-
Filesize
240KB
-
Filesize
27.1MB
-
Filesize
1024KB