Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
23/02/2025, 23:51
General
-
Target
rar.exe
-
Size
392KB
-
MD5
18488edb28f9d6bda06fa6bb7a3529c5
-
SHA1
6e0a4286e24a220701f1d460c3c57b12c446106b
-
SHA256
d6aa06fe25ed9f1b582251e01af0bbcb2d279f7fa57e8265c0823194793df309
-
SHA512
8781b7e204bff1f79378c4bdfd4dba14fd9a3a968d5f858d1f291e5166ebe912d7d7315824a76fba25e6bfba82be6b8d1245dc74909825889c8aea1ef1b16b2c
-
SSDEEP
6144:7DKqGZVEkU/krRcGV4wiiFCGJGh3CxHcTDH/MKItpZF2I:7eqmVXRcGV4wvCGJ+Cx8TDH/yXZF
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
g-partners.top
g-partners.live
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Gcleaner family
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
Onlylogger family
-
OnlyLogger payload 5 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\rar.exe"C:\Users\Admin\AppData\Local\Temp\rar.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
184KB
-
Filesize
196KB
-
Filesize
1024KB
-
Filesize
432KB
-
Filesize
184KB
-
Filesize
196KB