Analysis
-
max time kernel
145s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
21-12-2024 23:29
General
-
Target
8ed5129e332f2e816c536462fe70a15c7846eba0a198f511547bdc97b7f4bd29.exe
-
Size
369KB
-
MD5
74911e84a00d3b9894e474ac517dc104
-
SHA1
d72b6228bb3fc2361a5d5c3b58a0e99b51116fee
-
SHA256
8ed5129e332f2e816c536462fe70a15c7846eba0a198f511547bdc97b7f4bd29
-
SHA512
e5044a26d72b81e4146ba889540114722c6210015bc1f3aa03881ec629b69c88cab1f664c4cd9e8d030bfb52fd4527c81d7d0503cdc93e7362a87776f0eb5322
-
SSDEEP
6144:WILQs/6vmUWAMVKis7LUbrnEsWgEGlnlseu:WIksGYh07QnnEsWT
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
208.67.104.97
85.31.46.167
107.182.129.235
171.22.30.106
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ed5129e332f2e816c536462fe70a15c7846eba0a198f511547bdc97b7f4bd29.exe"C:\Users\Admin\AppData\Local\Temp\8ed5129e332f2e816c536462fe70a15c7846eba0a198f511547bdc97b7f4bd29.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
-
Filesize
1024KB
-
Filesize
276KB
-
Filesize
39.6MB
-
Filesize
1024KB
-
Filesize
264KB
-
Filesize
276KB