gcleaner | bb4f0fcf0b94915848c24fc234bd9cb2918e155d1cb9aef074cc6fdd7e3da335 | Triage

Sharing

General

Target

e9729b3be9699e0906ce8f425dddd858
Size

432KB
Sample

230413-ebhehaae81
MD5

e9729b3be9699e0906ce8f425dddd858
SHA1

3802442592f47f9696b71e24bcbc313b11ac3884
SHA256

bb4f0fcf0b94915848c24fc234bd9cb2918e155d1cb9aef074cc6fdd7e3da335
SHA512

06be64183b3cb6993f4a1cefe89de5ccd2784c022bb4de1b8003808bb6210857d59ba565778d7144e15b9172889f578908978a158d01c7ba0f1d16b08e9bc06b
SSDEEP

6144:WhRLGr8ONwsnmhOZPJkUDx9n6vNCW/aWUrTekD8Adv75O0jd9ICV+4:WhwohsnmkZPv6vN5iWEak4Ah75kCVH

Score

10^/10

gcleaner loader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

- Target
  
  e9729b3be9699e0906ce8f425dddd858
- Size
  
  432KB
- MD5
  
  e9729b3be9699e0906ce8f425dddd858
- SHA1
  
  3802442592f47f9696b71e24bcbc313b11ac3884
- SHA256
  
  bb4f0fcf0b94915848c24fc234bd9cb2918e155d1cb9aef074cc6fdd7e3da335
- SHA512
  
  06be64183b3cb6993f4a1cefe89de5ccd2784c022bb4de1b8003808bb6210857d59ba565778d7144e15b9172889f578908978a158d01c7ba0f1d16b08e9bc06b
- SSDEEP
  
  6144:WhRLGr8ONwsnmhOZPJkUDx9n6vNCW/aWUrTekD8Adv75O0jd9ICV+4:WhwohsnmkZPv6vN5iWEak4Ah75kCVH
Score

10^/10

gcleaner loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2