Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
17/04/2024, 13:40
General
-
Target
508e67f9f8ecec59538cd61fc6aaf0c25b4194d6dbd8b830f7b5bb2b8adf5ae9.exe
-
Size
238KB
-
MD5
d7a8d0ada2565dbc31293ce1d3a59470
-
SHA1
a7bc1a8f5975a99949e8fa075221183d464c0714
-
SHA256
508e67f9f8ecec59538cd61fc6aaf0c25b4194d6dbd8b830f7b5bb2b8adf5ae9
-
SHA512
e3a8a81026551ab2a4383f4cd95099d6efc7d5710c3e996908fe7d87deaf41a51a9fe7bf8af93e9dc71067776e32d4946c6da4926a3fb81969193cebd3f9b752
-
SSDEEP
3072:nijYQAMaMbfYAgVotVdHEn4b+4WFIyqxmf2HwUFCJijtzJngkZkDI6ocxf8a02:nijF9BlVdkoEFIy5OJzBgkZk8jcxL
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\508e67f9f8ecec59538cd61fc6aaf0c25b4194d6dbd8b830f7b5bb2b8adf5ae9.exe"C:\Users\Admin\AppData\Local\Temp\508e67f9f8ecec59538cd61fc6aaf0c25b4194d6dbd8b830f7b5bb2b8adf5ae9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
240KB
-
Filesize
532KB
-
Filesize
1024KB
-
Filesize
240KB