Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
21-11-2024 18:43
General
-
Target
0ea7de63260ddf223ae84ca5fad2c118ff3974b286770a0ca86f97463d0d2ee7.exe
-
Size
283KB
-
MD5
951ac512e6ee704cca96c4bab39ec1ca
-
SHA1
60c4f338cf78c280df17b5b0024e8d569dddeb7f
-
SHA256
0ea7de63260ddf223ae84ca5fad2c118ff3974b286770a0ca86f97463d0d2ee7
-
SHA512
77ca747741b60912f2b070682e405687c0ae56c44420fa2fa0e987a0662e06a98eced45beac80095f98733ee5d5ecd23d306154885751db95abaa5caf491cb00
-
SSDEEP
6144:q0BWJI6ONoPDXuqwgGUhBrgeVZo3MXsk3Hm61KwCRZ40:q0BWJI6QorXxw4VK3M8k3m6wq0
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
5.42.64.56
185.172.128.69
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ea7de63260ddf223ae84ca5fad2c118ff3974b286770a0ca86f97463d0d2ee7.exe"C:\Users\Admin\AppData\Local\Temp\0ea7de63260ddf223ae84ca5fad2c118ff3974b286770a0ca86f97463d0d2ee7.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
256KB
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
256KB