Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13-12-2024 07:05
General
-
Target
fec95e2980136052d251bf2932a3af39.exe
-
Size
385KB
-
MD5
fec95e2980136052d251bf2932a3af39
-
SHA1
00819383800b3548902bc68a244876bdd75fdb59
-
SHA256
e1c9b3cc2939b88146d2ecb53b98ad6f3ba64369027d8adfc78f20c4fa3e5512
-
SHA512
cc0bd1b3d51de961cec629cb17455d42a50f138b14c8dd733bec472745d43a2703040eaf53c6545383495299060730a4cc8e2eaebec17fe4cdebe3453af06eb1
-
SSDEEP
6144:Na47LJtFMBI1jN74VHD8ovRJGfQUTcYtFS+ufjtkUwamgtXj:E479tKB6aVHjJGfnTcYn8JAdgd
Score
10/10
Malware Config
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fec95e2980136052d251bf2932a3af39.exe"C:\Users\Admin\AppData\Local\Temp\fec95e2980136052d251bf2932a3af39.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
236KB
-
Filesize
252KB
-
Filesize
172KB
-
Filesize
236KB
-
Filesize
412KB
-
Filesize
252KB