Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
28-06-2024 04:51
General
-
Target
ef0b1d3c1b17e4b700f4ee78a2a078063a87ee01e23778e557f036ab2c80feeb.exe
-
Size
332KB
-
MD5
b1e62fb0c2fbd63e14bbc0dbb8c759a8
-
SHA1
4c79383307a81ceb0d65377ee61862682cc579c7
-
SHA256
ef0b1d3c1b17e4b700f4ee78a2a078063a87ee01e23778e557f036ab2c80feeb
-
SHA512
e773f435f855147bf393a218ba2c0a1f5a806c8617c01c1d77addacede216702af33c9c16933fd6d942bd04380c5f0fd693797ec373449c06b607511a98daeee
-
SSDEEP
6144:3LYcF4qRjE9UP+PYUAJalV2QwFz0ZtQaXvarj:30cqYUAUlV2QwFz0Zt3Xyr
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
185.172.128.69
Attributes
-
url_path
/advdlc.php
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef0b1d3c1b17e4b700f4ee78a2a078063a87ee01e23778e557f036ab2c80feeb.exe"C:\Users\Admin\AppData\Local\Temp\ef0b1d3c1b17e4b700f4ee78a2a078063a87ee01e23778e557f036ab2c80feeb.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
188KB
-
Filesize
180KB
-
Filesize
31.4MB
-
Filesize
1024KB