Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28-03-2024 20:25
General
-
Target
5adf12fdd3715cad26e68e06892b371a0c9802c5d8d8204075b62d503acc9fd8.exe
-
Size
386KB
-
MD5
3bbaaea05207c361ad908cbb5246a734
-
SHA1
66b3569d15609308aca4fc10170e05ca0aa46840
-
SHA256
5adf12fdd3715cad26e68e06892b371a0c9802c5d8d8204075b62d503acc9fd8
-
SHA512
35c490867c4d39ce33ca654f5f4e3b24c8a5111014d70645df32bdb898c46294126ae923a2bb21592a730530c26a098e48bc17dabc26f13af51bab21a17f2ada
-
SSDEEP
6144:SCcWVCDeWaserbq2DNUx95x6vbbAyLmtjdeC37hASDN8raxW64:gWVCivserrWx9PUvAphdegZN8raxW
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\5adf12fdd3715cad26e68e06892b371a0c9802c5d8d8204075b62d503acc9fd8.exe"C:\Users\Admin\AppData\Local\Temp\5adf12fdd3715cad26e68e06892b371a0c9802c5d8d8204075b62d503acc9fd8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
240KB
-
Filesize
1024KB
-
Filesize
1.4MB
-
Filesize
1024KB