Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d0509fe53a1b78b58cc96fa3ff432091fa6269e290a3b0219a742a52ec70dd6

  • Size

    314KB

  • Sample

    240320-ayngtacb45

  • MD5

    be833d792a0326319a1c3f30d08b0c12

  • SHA1

    57f351d3962044378b139e6e19befb7931aed68c

  • SHA256

    1d0509fe53a1b78b58cc96fa3ff432091fa6269e290a3b0219a742a52ec70dd6

  • SHA512

    3b57a0b08504b1ebfcd53a1e59a99c0bb4881cb95b30447a0e2200434bd78196775c90d4533138ed5c1ad4c8b2d413ce38b3139a78dc6cb400f6bab81f99f9c2

  • SSDEEP

    6144:unPjFL+IXjC9khZZMakg7D8wh/RW3gAQ99riKVkk:iPjFL+ITskKk7owhQgT99rvVk

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.115

Targets

    • Target

      1d0509fe53a1b78b58cc96fa3ff432091fa6269e290a3b0219a742a52ec70dd6

    • Size

      314KB

    • MD5

      be833d792a0326319a1c3f30d08b0c12

    • SHA1

      57f351d3962044378b139e6e19befb7931aed68c

    • SHA256

      1d0509fe53a1b78b58cc96fa3ff432091fa6269e290a3b0219a742a52ec70dd6

    • SHA512

      3b57a0b08504b1ebfcd53a1e59a99c0bb4881cb95b30447a0e2200434bd78196775c90d4533138ed5c1ad4c8b2d413ce38b3139a78dc6cb400f6bab81f99f9c2

    • SSDEEP

      6144:unPjFL+IXjC9khZZMakg7D8wh/RW3gAQ99riKVkk:iPjFL+ITskKk7owhQgT99rvVk

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks