Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

  • Size

    422KB

  • Sample

    240911-vwgxgasflj

  • MD5

    8d577a901d3bc4d5d84cfd938cfefe3e

  • SHA1

    b96e97a081ef328b6b22d76569ff06ee8f2472d1

  • SHA256

    6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

  • SHA512

    3c3e3ba1890561155746a8ef65bab606be14bf02b3c2b5f59ffd890f56037a356b0deafdf7c748cbe6b79370b0dbd2b9fe38515c62b6fe14aa2855bb2eb2a49e

  • SSDEEP

    6144:mP+lSXQSvJaNuY41WxdQWvJpbp6csssruC4x6SI4U2401iHP6B:/lYJZY4QxqSf6KES9UaIHi

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

    • Size

      422KB

    • MD5

      8d577a901d3bc4d5d84cfd938cfefe3e

    • SHA1

      b96e97a081ef328b6b22d76569ff06ee8f2472d1

    • SHA256

      6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

    • SHA512

      3c3e3ba1890561155746a8ef65bab606be14bf02b3c2b5f59ffd890f56037a356b0deafdf7c748cbe6b79370b0dbd2b9fe38515c62b6fe14aa2855bb2eb2a49e

    • SSDEEP

      6144:mP+lSXQSvJaNuY41WxdQWvJpbp6csssruC4x6SI4U2401iHP6B:/lYJZY4QxqSf6KES9UaIHi

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks