Analysis
-
max time kernel
92s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17/04/2024, 12:20
General
-
Target
9314d40f064aed182d1b0910dcc17d215a7bcdfe7fa356202c0f84556fbce9f1.exe
-
Size
261KB
-
MD5
05486b43318507e9b40079ccc015fe25
-
SHA1
81b3aca7116005ecb58c0fcdf21365c1e4f4ba98
-
SHA256
9314d40f064aed182d1b0910dcc17d215a7bcdfe7fa356202c0f84556fbce9f1
-
SHA512
d3cdf2d7c5005504f1e2eda9adcf7e652ff7618e08167f341acf6abc97d235bb7e2f9dd1101e1df3bca03bb4de04cb08a2257df449a65a4ae69a569b4dcf6bbb
-
SSDEEP
6144:uSZu0R2UaRHtcBVQZrKNF3h54I7G1SOm:zZuLg3NCI0SO
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9314d40f064aed182d1b0910dcc17d215a7bcdfe7fa356202c0f84556fbce9f1.exe"C:\Users\Admin\AppData\Local\Temp\9314d40f064aed182d1b0910dcc17d215a7bcdfe7fa356202c0f84556fbce9f1.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1712 -s 9642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1712 -ip 17121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
240KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
240KB