Overview

overview

10

Static

static

c5d06fade8...d4.exe

windows7-x64

10

c5d06fade8...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5d06fade8619c73307daee19448c563089860df2eb5089a8d2a657db0eb08d4

  • Size

    235KB

  • Sample

    230129-z3tl3aee5y

  • MD5

    937e81272e0ab7d2d0eaad884b6ec4d3

  • SHA1

    8de874a12e2bd7173d88b1fb0197466476f6c409

  • SHA256

    c5d06fade8619c73307daee19448c563089860df2eb5089a8d2a657db0eb08d4

  • SHA512

    849cebffe47349d0535345d38574de39c9c833dbdd0e3e2c929bc221e676d8ecd891e2b414a0ff6e8863acb1af82706a484d0f0755afbec5117a172870f9493e

  • SSDEEP

    6144:x1x/wC3MeSieMVchyPaa5FxwwudbZDLr:x1O1eSSbiAFxwFdB/

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

gcleaner.pro

Targets

    • Target

      c5d06fade8619c73307daee19448c563089860df2eb5089a8d2a657db0eb08d4

    • Size

      235KB

    • MD5

      937e81272e0ab7d2d0eaad884b6ec4d3

    • SHA1

      8de874a12e2bd7173d88b1fb0197466476f6c409

    • SHA256

      c5d06fade8619c73307daee19448c563089860df2eb5089a8d2a657db0eb08d4

    • SHA512

      849cebffe47349d0535345d38574de39c9c833dbdd0e3e2c929bc221e676d8ecd891e2b414a0ff6e8863acb1af82706a484d0f0755afbec5117a172870f9493e

    • SSDEEP

      6144:x1x/wC3MeSieMVchyPaa5FxwwudbZDLr:x1O1eSSbiAFxwFdB/

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks