Overview

overview

10

Static

static

1

dac1de6b25...29.exe

windows7-x64

10

dac1de6b25...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dac1de6b2503baa1e80b0c90555aa87b663cd6a8e57651c97aae775defbe8f29.zip

  • Size

    205KB

  • Sample

    230310-m2n9qsda28

  • MD5

    62173ad77fce483e8ae233471a854d1a

  • SHA1

    9e25825e241a9ef11a1e80f03a4e6032329136b1

  • SHA256

    e1ae9dc2a21030dde47c0f9338f6b8e84d953092aa482765b5b14e17cb79f92d

  • SHA512

    5f3c774596ba91fdf9b0f485aa454fad1c09096454dddb5b3012dd08b81bcdf524e980482f1bf8ec4176e974cf0d0d23bea1c694c64edd76496716b529592482

  • SSDEEP

    3072:JtUegyEUm+w/oeBBOZ9/ouU78bu3Vg6GVXZouWiDrheFlI7R3HE2rCX3K+H2pd:JtUelEMwWo6Sg6GVpbn13NrGa+Wpd

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      dac1de6b2503baa1e80b0c90555aa87b663cd6a8e57651c97aae775defbe8f29.exe

    • Size

      270KB

    • MD5

      0b58b97488ac17f7aa80c4581966782d

    • SHA1

      d8fc50d1115b21fb3c02311c08ef651cd2808a2a

    • SHA256

      dac1de6b2503baa1e80b0c90555aa87b663cd6a8e57651c97aae775defbe8f29

    • SHA512

      a842310d98a7d9a54a98fd593febcbbad2f963e2a3599218ac5fdbb8c526b2f7ee6113cae3443386384533f81e02ba46883a2663b0fe0a38f5dde544231bc82c

    • SSDEEP

      6144:ZSpkt9lfdyRqKoFrWvzpjhLY/qM8Q50/OP3Xp6Z/ofA:ZWkbpdyRqKvvzhhLkqM8lO5Io

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks