Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
24-12-2024 20:09
General
-
Target
699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a.exe
-
Size
245KB
-
MD5
0cf83b2dda5e2a39ae64dec3aa87113e
-
SHA1
c9113265bf7579c88bb227653866846b866c61f6
-
SHA256
699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a
-
SHA512
b15761de5429ff263fd7b28c3c027cac096e6d6a976797956fcaea5226151699fa5e1d7879a83455f1e86d5884765f6e647f4a32c28af08af23eb996e62573be
-
SSDEEP
6144:t62YFANstsRp/+vtGRgdRwezeF6u7kqJJ:pbsSH+vje7P
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
208.67.104.97
85.31.46.167
107.182.129.235
171.22.30.106
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a.exe"C:\Users\Admin\AppData\Local\Temp\699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
-
Filesize
1024KB
-
Filesize
276KB
-
Filesize
628KB
-
Filesize
1024KB
-
Filesize
264KB
-
Filesize
276KB