Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
17/04/2024, 13:40
General
-
Target
03b8ef63390d4611b8caf0670192d03037c0ab000ab9ac4af49fb10043b2a34b.exe
-
Size
251KB
-
MD5
fb641c905528cafcdd7dea2f6b418552
-
SHA1
1752a0074a731a756715006889f3b60a3a41008c
-
SHA256
03b8ef63390d4611b8caf0670192d03037c0ab000ab9ac4af49fb10043b2a34b
-
SHA512
1eb0fe1cf41dad00907eed10f38082798f93ccc81c4700b6f54d8152de60d751ba682aef2cc8dfc861d349bf38ca596346bf224adbe0f1c950cc5175062e557b
-
SSDEEP
6144:fg+fwtDOHDKf0thhI+ePhSPT9eAiIQsflIp:fffwdO40thhI+SS79liIrf
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.3
5.42.65.115
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Downloads MZ/PE file
Processes
-
C:\Users\Admin\AppData\Local\Temp\03b8ef63390d4611b8caf0670192d03037c0ab000ab9ac4af49fb10043b2a34b.exe"C:\Users\Admin\AppData\Local\Temp\03b8ef63390d4611b8caf0670192d03037c0ab000ab9ac4af49fb10043b2a34b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
240KB
-
Filesize
30.9MB
-
Filesize
1024KB