Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

rar.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rar.exe

  • Size

    392KB

  • Sample

    250223-3s7bysyns9

  • MD5

    18488edb28f9d6bda06fa6bb7a3529c5

  • SHA1

    6e0a4286e24a220701f1d460c3c57b12c446106b

  • SHA256

    d6aa06fe25ed9f1b582251e01af0bbcb2d279f7fa57e8265c0823194793df309

  • SHA512

    8781b7e204bff1f79378c4bdfd4dba14fd9a3a968d5f858d1f291e5166ebe912d7d7315824a76fba25e6bfba82be6b8d1245dc74909825889c8aea1ef1b16b2c

  • SSDEEP

    6144:7DKqGZVEkU/krRcGV4wiiFCGJGh3CxHcTDH/MKItpZF2I:7eqmVXRcGV4wvCGJ+Cx8TDH/yXZF

Score
10/10
gcleaneronlyloggerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

g-partners.top

g-partners.live

Targets

    • Target

      rar.exe

    • Size

      392KB

    • MD5

      18488edb28f9d6bda06fa6bb7a3529c5

    • SHA1

      6e0a4286e24a220701f1d460c3c57b12c446106b

    • SHA256

      d6aa06fe25ed9f1b582251e01af0bbcb2d279f7fa57e8265c0823194793df309

    • SHA512

      8781b7e204bff1f79378c4bdfd4dba14fd9a3a968d5f858d1f291e5166ebe912d7d7315824a76fba25e6bfba82be6b8d1245dc74909825889c8aea1ef1b16b2c

    • SSDEEP

      6144:7DKqGZVEkU/krRcGV4wiiFCGJGh3CxHcTDH/MKItpZF2I:7eqmVXRcGV4wvCGJ+Cx8TDH/yXZF

    Score
    10/10
    gcleaneronlyloggerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • Onlylogger family

      onlylogger

    • OnlyLogger payload

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks