Analysis
-
max time kernel
291s -
max time network
290s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 22:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc.exe
Resource
win7-20240508-en
1 signatures
300 seconds
General
-
Target
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc.exe
-
Size
264KB
-
MD5
690ecd1b22b38233ddbb8c3d60a8cf33
-
SHA1
31441770f17ba19e3d5d3cd3bd5b5eb8294fc379
-
SHA256
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc
-
SHA512
4fbfd9e8c0f90ebb45a8c99f26fa40acdafdf1b9e0a490735c66c081c481d76b96619301bb79b3fc09d2c6ee2dfbb90fb966bceb06f4da4419c68ce7ccfc2e93
-
SSDEEP
3072:r3Uq9xqR0SHSkKISfj9AGD0kUxgCCwDCDcEMPofLCKb4ZnHd0XvUYHLl3VInF23C:IV0SHSXISr+GkxgCqcmzf8GVUF23M
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
185.172.128.69
Attributes
-
url_path
/advdlc.php
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2188-1-0x0000000000570000-0x0000000000670000-memory.dmpFilesize
1024KB
-
memory/2188-3-0x0000000000400000-0x000000000042F000-memory.dmpFilesize
188KB
-
memory/2188-2-0x0000000000230000-0x000000000025D000-memory.dmpFilesize
180KB
-
memory/2188-4-0x0000000000400000-0x000000000044C000-memory.dmpFilesize
304KB
-
memory/2188-5-0x0000000000570000-0x0000000000670000-memory.dmpFilesize
1024KB
-
memory/2188-7-0x0000000000400000-0x000000000042F000-memory.dmpFilesize
188KB