Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
13-12-2024 07:05
General
-
Target
913508136edb1a9c093fe801a7a20833.exe
-
Size
385KB
-
MD5
913508136edb1a9c093fe801a7a20833
-
SHA1
caff31db9b6d9eed07d9d822a5d935743e5a96ec
-
SHA256
9bbb6839b4a2abf2d8ef4685fa85e171343e909c62ead34a66da2b13259999e6
-
SHA512
119df083fcba996504ce130e454204daff88259182ed78cc251efdbc93eea7b8e766b38467621522b573146793b138a343eabb422e91f6c38cc712fcbb990cce
-
SSDEEP
6144:5P4LJiS4ARKP4Gb9EoOYwEU2lkciTlbt1bDnWqj4K8C4D:5P49iJqKPj9E3x2lkc8lTiU
Score
10/10
Malware Config
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\913508136edb1a9c093fe801a7a20833.exe"C:\Users\Admin\AppData\Local\Temp\913508136edb1a9c093fe801a7a20833.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
236KB
-
Filesize
252KB
-
Filesize
172KB
-
Filesize
236KB
-
Filesize
412KB
-
Filesize
252KB