Overview

overview

10

Static

static

3

06638199.exe

windows7-x64

10

06638199.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06638199.exe

  • Size

    363KB

  • Sample

    230528-knnpyaef93

  • MD5

    11b8d2f1c1da99d2eec370ecf4bca6fc

  • SHA1

    de11984271c74e9169237fa9d4391b17e871b23f

  • SHA256

    bf9f1faeb5ffafd35851df4a42f7a486ad0b2eb3f77ccc943c4cd21d1a75e3c0

  • SHA512

    ad7e05230478a363db6f07915f7675c396c85e3c7f843c1d0c4cac762acd45509f40836f9119a19d38693ff4c416c0a157afe996347c666245c6de06cc89ea5f

  • SSDEEP

    6144:bls/DTNiyXaYJczQRmImjkj/Tjrtim4EeOoP0/:pi/QIaYJIQcX6/JimP9o

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      06638199.exe

    • Size

      363KB

    • MD5

      11b8d2f1c1da99d2eec370ecf4bca6fc

    • SHA1

      de11984271c74e9169237fa9d4391b17e871b23f

    • SHA256

      bf9f1faeb5ffafd35851df4a42f7a486ad0b2eb3f77ccc943c4cd21d1a75e3c0

    • SHA512

      ad7e05230478a363db6f07915f7675c396c85e3c7f843c1d0c4cac762acd45509f40836f9119a19d38693ff4c416c0a157afe996347c666245c6de06cc89ea5f

    • SSDEEP

      6144:bls/DTNiyXaYJczQRmImjkj/Tjrtim4EeOoP0/:pi/QIaYJIQcX6/JimP9o

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks