gcleaner | 76c09437c0f32f5fc18900988f5658c61635c16dc8c42628aadddf3fb4eca2a3 | Triage

Sharing

General

Target

4654d5533c4a669a238b47dbb0fc50a3.bin
Size

218KB
Sample

230404-bqhf9sdh9t
MD5

1099f70730e2b027058d3e3dc6dc91a6
SHA1

7525c550167b6ff54ef3bd7bf6a6f7da117b74bc
SHA256

76c09437c0f32f5fc18900988f5658c61635c16dc8c42628aadddf3fb4eca2a3
SHA512

687cd72be51dac921b9f9b3a063e34739cb7baeb57c8c268f16de8a8118a3929075f87d0c44c552c56009683f960f447c78531837e89d00ffc27fd7752fec7ae
SSDEEP

6144:rv7v0qg1FK7bigY2NBbTMuZJireem+XECLK7mNes:z7MHK7biTkBbwu7yeeXEmNP

Score

10^/10

gcleaner loader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

- Target
  
  db396e0845fb4e19743f8cc0c1233f21f14a20cdf5f5c2b65b4e4d7f2a3f8791.exe
- Size
  
  323KB
- MD5
  
  4654d5533c4a669a238b47dbb0fc50a3
- SHA1
  
  539d6e7d186315b27fd7b77957b488960cb5708b
- SHA256
  
  db396e0845fb4e19743f8cc0c1233f21f14a20cdf5f5c2b65b4e4d7f2a3f8791
- SHA512
  
  b45773ed88ec4016e5e9e67550a7258e464e78080575d92a88f3be9688db719e7f9e60a77d71949c6966725a29df02d801a8b37dec47d68b837c356e6b3ab1ec
- SSDEEP
  
  6144:AH13WD3tpBSB8coYJUTVxTOQeDp64Rotto/+qfsqpc:AV3g3t6BDoYJOBeDp6kpK
Score

10^/10

gcleaner loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2