Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 06:34

General

  • Target

    0a2f129fb15bb15a37b7726f2b827d2d69e99ec84ca7b067d2b25df43f0d1886.exe

  • Size

    244KB

  • MD5

    925464cfa1cca562f08fcf8e18e2cbf6

  • SHA1

    2620d8311887fe5e3e74e68a67d84ea73aaf9fe0

  • SHA256

    0a2f129fb15bb15a37b7726f2b827d2d69e99ec84ca7b067d2b25df43f0d1886

  • SHA512

    085aadcdcd3c5d72606d72f78472cef7199f1eb35c40b92414626285bd51363af85ff6db7b081a0e07d88132089a90335d5c71b6496fc53e6a5de3eff7ffc083

  • SSDEEP

    6144:2L3vTuRTmD/EEOjQPzApoQqnVBSdvcn+X:KfTuRiD/00vPS+

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Signatures

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a2f129fb15bb15a37b7726f2b827d2d69e99ec84ca7b067d2b25df43f0d1886.exe
    "C:\Users\Admin\AppData\Local\Temp\0a2f129fb15bb15a37b7726f2b827d2d69e99ec84ca7b067d2b25df43f0d1886.exe"
    1⤵
      PID:1856

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1856-1-0x0000000002910000-0x0000000002A10000-memory.dmp

            Filesize

            1024KB

          • memory/1856-3-0x0000000000400000-0x0000000000440000-memory.dmp

            Filesize

            256KB

          • memory/1856-2-0x0000000000220000-0x000000000025C000-memory.dmp

            Filesize

            240KB

          • memory/1856-4-0x0000000000400000-0x0000000002825000-memory.dmp

            Filesize

            36.1MB

          • memory/1856-6-0x0000000002910000-0x0000000002A10000-memory.dmp

            Filesize

            1024KB

          • memory/1856-7-0x0000000000400000-0x0000000000440000-memory.dmp

            Filesize

            256KB