Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

  • Size

    383KB

  • Sample

    240615-pttwcsvbqq

  • MD5

    6464b510554ea72632d2b746b91d8744

  • SHA1

    b50afb7dc6fd024514d5416bb82b8bce5ee6c3fa

  • SHA256

    97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

  • SHA512

    e2461beed333a1c586847fac6c147faa831712eddb45dc1cf515a9e2314c84e23b377fafbf9024c0cb13ca50d1fccc5051ccb4e4ef917ab80a053ed1dda26e82

  • SSDEEP

    6144:LFbun5sFf+48TQHOMTGXHWsegZ3pIIl9mFIOujTh:L8nSFf+NUuMTGfZ3mIl9E/s

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

    • Size

      383KB

    • MD5

      6464b510554ea72632d2b746b91d8744

    • SHA1

      b50afb7dc6fd024514d5416bb82b8bce5ee6c3fa

    • SHA256

      97a9979446cbbcf6d30c4aeca48080714813f84cba13b3fd84dea368989ae347

    • SHA512

      e2461beed333a1c586847fac6c147faa831712eddb45dc1cf515a9e2314c84e23b377fafbf9024c0cb13ca50d1fccc5051ccb4e4ef917ab80a053ed1dda26e82

    • SSDEEP

      6144:LFbun5sFf+48TQHOMTGXHWsegZ3pIIl9mFIOujTh:L8nSFf+NUuMTGfZ3mIl9E/s

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks