Analysis
-
max time kernel
292s -
max time network
300s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
27-06-2024 22:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc.exe
Resource
win7-20240508-en
1 signatures
300 seconds
General
-
Target
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc.exe
-
Size
264KB
-
MD5
690ecd1b22b38233ddbb8c3d60a8cf33
-
SHA1
31441770f17ba19e3d5d3cd3bd5b5eb8294fc379
-
SHA256
11244909d590de893df089f43358f431f4c6327952d0e861a829bd1ab07499bc
-
SHA512
4fbfd9e8c0f90ebb45a8c99f26fa40acdafdf1b9e0a490735c66c081c481d76b96619301bb79b3fc09d2c6ee2dfbb90fb966bceb06f4da4419c68ce7ccfc2e93
-
SSDEEP
3072:r3Uq9xqR0SHSkKISfj9AGD0kUxgCCwDCDcEMPofLCKb4ZnHd0XvUYHLl3VInF23C:IV0SHSXISr+GkxgCqcmzf8GVUF23M
Malware Config
Extracted
Family
gcleaner
C2
185.172.128.90
185.172.128.69
Attributes
-
url_path
/advdlc.php
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3380-3-0x0000000000400000-0x000000000042F000-memory.dmpFilesize
188KB
-
memory/3380-1-0x00000000005C0000-0x00000000006C0000-memory.dmpFilesize
1024KB
-
memory/3380-2-0x0000000002080000-0x00000000020AD000-memory.dmpFilesize
180KB
-
memory/3380-4-0x0000000000400000-0x000000000044C000-memory.dmpFilesize
304KB
-
memory/3380-6-0x00000000005C0000-0x00000000006C0000-memory.dmpFilesize
1024KB