Overview

overview

10

Static

static

1

4654d5533c...a3.exe

windows7-x64

10

4654d5533c...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4654d5533c4a669a238b47dbb0fc50a3.exe

  • Size

    323KB

  • Sample

    230402-sx1pvsha58

  • MD5

    4654d5533c4a669a238b47dbb0fc50a3

  • SHA1

    539d6e7d186315b27fd7b77957b488960cb5708b

  • SHA256

    db396e0845fb4e19743f8cc0c1233f21f14a20cdf5f5c2b65b4e4d7f2a3f8791

  • SHA512

    b45773ed88ec4016e5e9e67550a7258e464e78080575d92a88f3be9688db719e7f9e60a77d71949c6966725a29df02d801a8b37dec47d68b837c356e6b3ab1ec

  • SSDEEP

    6144:AH13WD3tpBSB8coYJUTVxTOQeDp64Rotto/+qfsqpc:AV3g3t6BDoYJOBeDp6kpK

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      4654d5533c4a669a238b47dbb0fc50a3.exe

    • Size

      323KB

    • MD5

      4654d5533c4a669a238b47dbb0fc50a3

    • SHA1

      539d6e7d186315b27fd7b77957b488960cb5708b

    • SHA256

      db396e0845fb4e19743f8cc0c1233f21f14a20cdf5f5c2b65b4e4d7f2a3f8791

    • SHA512

      b45773ed88ec4016e5e9e67550a7258e464e78080575d92a88f3be9688db719e7f9e60a77d71949c6966725a29df02d801a8b37dec47d68b837c356e6b3ab1ec

    • SSDEEP

      6144:AH13WD3tpBSB8coYJUTVxTOQeDp64Rotto/+qfsqpc:AV3g3t6BDoYJOBeDp6kpK

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks