Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce2c171466432ae49977894325fa10c66c9ceeeb6a324e450eaad7bab91bf60b

  • Size

    338KB

  • Sample

    240710-gxb6qa1dkj

  • MD5

    d8e6202df77e830b155d7bf55dc64365

  • SHA1

    aa1e5518f19707bdd798e4975065024183d4b699

  • SHA256

    ce2c171466432ae49977894325fa10c66c9ceeeb6a324e450eaad7bab91bf60b

  • SHA512

    22c9a726ecba64f20260f9665fb9faebba3fb8bf90e8142ae5f1674795e9e7823030d4b8348a5df0b985b0fd516894e57af01221d76a84aa3fce259c8047eb23

  • SSDEEP

    6144:Aspc5mxu/vdbGh3MhcIM2iNQ76831tMKgh5UJp8TM:AspSmxu/c33F2iNAZ5K5U7

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

185.172.128.69
Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      ce2c171466432ae49977894325fa10c66c9ceeeb6a324e450eaad7bab91bf60b

    • Size

      338KB

    • MD5

      d8e6202df77e830b155d7bf55dc64365

    • SHA1

      aa1e5518f19707bdd798e4975065024183d4b699

    • SHA256

      ce2c171466432ae49977894325fa10c66c9ceeeb6a324e450eaad7bab91bf60b

    • SHA512

      22c9a726ecba64f20260f9665fb9faebba3fb8bf90e8142ae5f1674795e9e7823030d4b8348a5df0b985b0fd516894e57af01221d76a84aa3fce259c8047eb23

    • SSDEEP

      6144:Aspc5mxu/vdbGh3MhcIM2iNQ76831tMKgh5UJp8TM:AspSmxu/c33F2iNAZ5K5U7

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks