Analysis
- max time kernel
118s - max time network
121s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
22/03/2024, 07:37
General
- Target f1dd2c73ae8ae93e7c7046a9d3ef2845.exe
- Size 371KB
- Sample240322-jfvmvaaa66
- SHA256 00efc6f7f740e5423da1a6817a21f5cdcfaa6366e57413cc55dc255f81962d82
Score
10/10
Malware Config
Extracted
Family
-
gcleaner
C2
-
185.172.128.90
-
5.42.64.3
-
5.42.65.115
Signatures
- GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
- Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1dd2c73ae8ae93e7c7046a9d3ef2845.exe"C:\Users\Admin\AppData\Local\Temp\f1dd2c73ae8ae93e7c7046a9d3ef2845.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2204-1-0x0000000000290000-0x0000000000390000-memory.dmp
memory/2204-2-0x0000000002D60000-0x0000000002D9C000-memory.dmp
memory/2204-3-0x0000000000400000-0x0000000002D5B000-memory.dmp
memory/2204-4-0x0000000000400000-0x0000000002D5B000-memory.dmp
memory/2204-6-0x0000000000290000-0x0000000000390000-memory.dmp
memory/2204-7-0x0000000002D60000-0x0000000002D9C000-memory.dmp
memory/2204-13-0x0000000000400000-0x0000000002D5B000-memory.dmp
memory/2204-14-0x0000000000290000-0x0000000000390000-memory.dmp