Resubmissions
19/04/2024, 20:17
240419-y2ynysfb9x 1016/04/2024, 19:50
240416-yklytsba38 1016/04/2024, 19:47
240416-yhkyrace2t 10Analysis
-
max time kernel
24s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19/04/2024, 20:17
General
-
Target
b2a7101f02840111a72d070f68470577aee62b37b3c35ff4993f28ab419c0eef.exe
-
Size
296KB
-
MD5
f7d2ce8ab86d84eb5f87f0d86fb063fa
-
SHA1
f9c142749b6581116e4676391b30815d4a98181c
-
SHA256
b2a7101f02840111a72d070f68470577aee62b37b3c35ff4993f28ab419c0eef
-
SHA512
10881fadd22757f4e90da3e0ced380450f3e689bb2fd4bc9281c3ee280e383ca876c137d4267a8536083a74fdb6620e4dab812a6297c9534fa4066b574dff9b2
-
SSDEEP
3072:B9LIa8DW0cO1L75Gi4ivyLOla1aEYAbsmuMe2mvzu0SpK5uobh4araQeeb:LLZH0cYLsreeaEdgmozws4RE
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.65.64
Attributes
-
url_path
/advdlc.php
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2a7101f02840111a72d070f68470577aee62b37b3c35ff4993f28ab419c0eef.exe"C:\Users\Admin\AppData\Local\Temp\b2a7101f02840111a72d070f68470577aee62b37b3c35ff4993f28ab419c0eef.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
180KB
-
Filesize
40.2MB