Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9882ed7ffa099d237a516d29f93cbbb9a88fb451d7bb45ff469721aac04cd213

  • Size

    315KB

  • Sample

    240911-accs7a1hkr

  • MD5

    e496b2bc071d4df882ee652afa8dbc51

  • SHA1

    a7cf3d1bd6a7e7f3abe20c2936365bf12dba7481

  • SHA256

    9882ed7ffa099d237a516d29f93cbbb9a88fb451d7bb45ff469721aac04cd213

  • SHA512

    512bcdb4a7eb94d76e3e92850c684506b9761599c5383bc2a07d7e21ce1b6834b7e61a3b10a09ee29028cc6f82da97b5e575de1cb6a8f90d8d1d2af1f9613319

  • SSDEEP

    6144:dRYFYWDZ4cdgIkmO4NXfz+PuQTdJJOxq:dkYWDZ4cLkmOSXbShdJJOxq

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      9882ed7ffa099d237a516d29f93cbbb9a88fb451d7bb45ff469721aac04cd213

    • Size

      315KB

    • MD5

      e496b2bc071d4df882ee652afa8dbc51

    • SHA1

      a7cf3d1bd6a7e7f3abe20c2936365bf12dba7481

    • SHA256

      9882ed7ffa099d237a516d29f93cbbb9a88fb451d7bb45ff469721aac04cd213

    • SHA512

      512bcdb4a7eb94d76e3e92850c684506b9761599c5383bc2a07d7e21ce1b6834b7e61a3b10a09ee29028cc6f82da97b5e575de1cb6a8f90d8d1d2af1f9613319

    • SSDEEP

      6144:dRYFYWDZ4cdgIkmO4NXfz+PuQTdJJOxq:dkYWDZ4cLkmOSXbShdJJOxq

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks