Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f882cbd5034165bd0b67394a0d3fa0126f06a4fa2b5c0aaaf41fda6cf645f2c3

  • Size

    310KB

  • Sample

    240912-hf269awema

  • MD5

    6c75f4f6f5e088a7fa62a7b840c1e319

  • SHA1

    630f35575568b0b5fe8c1122872f4cce8548d001

  • SHA256

    f882cbd5034165bd0b67394a0d3fa0126f06a4fa2b5c0aaaf41fda6cf645f2c3

  • SHA512

    b7dbb97ef65e5bdf069e7af468681fd08f98f19cd65c40630818e95c5d1782c3eb1c2aa7fd5450dba268bd9480742353644e5cc97e933702d6ac1d827cce073d

  • SSDEEP

    6144:mIopxV3C1cvA7vTw6a5kYi6zlqYCRProo5:mICVy1c2vsROYi4MYCRPro

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      f882cbd5034165bd0b67394a0d3fa0126f06a4fa2b5c0aaaf41fda6cf645f2c3

    • Size

      310KB

    • MD5

      6c75f4f6f5e088a7fa62a7b840c1e319

    • SHA1

      630f35575568b0b5fe8c1122872f4cce8548d001

    • SHA256

      f882cbd5034165bd0b67394a0d3fa0126f06a4fa2b5c0aaaf41fda6cf645f2c3

    • SHA512

      b7dbb97ef65e5bdf069e7af468681fd08f98f19cd65c40630818e95c5d1782c3eb1c2aa7fd5450dba268bd9480742353644e5cc97e933702d6ac1d827cce073d

    • SSDEEP

      6144:mIopxV3C1cvA7vTw6a5kYi6zlqYCRProo5:mICVy1c2vsROYi4MYCRPro

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks