Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15-01-2025 06:59
General
-
Target
3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9.exe
-
Size
2.8MB
-
MD5
939fd770e4d4763f85efb923a1e7ea37
-
SHA1
ce70ed620bfe5a25b45d83c9e99ace3a09426221
-
SHA256
3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9
-
SHA512
dd26bcd46b6ce139d257a47f41a12db145e3b814de2f4e082f90cb588a3e05a92b36b46126c9aec6941d3a89e618d57f36ec64567ec8e4c3d52d65f6dc4620f5
-
SSDEEP
24576:ggJdrsBibJ60h7R2yGWHPApPMMcfMErldxfhzLEiL18iIVcaRIfMQ8PXFfA0rYw:TrsBibvh7R2yGLc0ifzLEkYXuCPXFt
Malware Config
Extracted
gcleaner
85.31.45.39
85.31.45.250
85.31.45.251
85.31.45.88
-
url_path
/b.php
/d.php
/d.php
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
Downloads MZ/PE file
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9.exe"C:\Users\Admin\AppData\Local\Temp\3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.8MB
-
Filesize
272KB
-
Filesize
16.8MB
-
Filesize
16.8MB
-
Filesize
272KB