Overview

overview

10

Static

static

3

03460599.exe

windows7-x64

10

03460599.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    03460599.exe

  • Size

    266KB

  • Sample

    230615-pl27rsgf63

  • MD5

    8ce90237a2c9e8b9ffe79969ea4569f0

  • SHA1

    2ec06fb897aecf08d5540a359dc1f65228712f1c

  • SHA256

    2bba9a446eaad097a08207013b69eb22f8879558d9fe9be8504ac5838a49531f

  • SHA512

    5fc21bdc0a4460efe4243a82f3bb9318cc95d0b1cb3b8d00d1d58effc060efc825810a30d763cfdb92faba6e84004c78f6ed68a19e77b4bd36dc58dc8a4743a1

  • SSDEEP

    6144:cWgWcGi2T+AGlHHuoNkCHOkVKT6j1IRc:cWzcGiDAG9uoNd1VVC

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      03460599.exe

    • Size

      266KB

    • MD5

      8ce90237a2c9e8b9ffe79969ea4569f0

    • SHA1

      2ec06fb897aecf08d5540a359dc1f65228712f1c

    • SHA256

      2bba9a446eaad097a08207013b69eb22f8879558d9fe9be8504ac5838a49531f

    • SHA512

      5fc21bdc0a4460efe4243a82f3bb9318cc95d0b1cb3b8d00d1d58effc060efc825810a30d763cfdb92faba6e84004c78f6ed68a19e77b4bd36dc58dc8a4743a1

    • SSDEEP

      6144:cWgWcGi2T+AGlHHuoNkCHOkVKT6j1IRc:cWzcGiDAG9uoNd1VVC

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks