Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19-03-2024 08:01
General
-
Target
d59a944e983379bc4f6c2894ec31f035.exe
-
Size
282KB
-
MD5
d59a944e983379bc4f6c2894ec31f035
-
SHA1
6ab89f5b32c8cd950f058cfa1e1e3ca28d8f9cdf
-
SHA256
60ce565636361df4ce27ea99867235ae7b80c7aae7a381a7afeef02e3f1dfd2f
-
SHA512
92a336c07d1d097ce279aa5096171b5edf0f8018d2ead4afe111f13be90578bd49a9b610ea1ee22515b04981b003193281add00751dd151a1cd04397fd0e8046
-
SSDEEP
6144:QQDOiFeYonu4KY3j+Tss3juTjTAXK0ZbvrPFMoGh+32+K/a:JMYou4Ko+os3KTjTAXK4jr999
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d59a944e983379bc4f6c2894ec31f035.exe"C:\Users\Admin\AppData\Local\Temp\d59a944e983379bc4f6c2894ec31f035.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
188KB
-
Filesize
39.3MB
-
Filesize
39.3MB
-
Filesize
1024KB
-
Filesize
188KB