General

  • Target

    424c177d6e52272e7f7d2b8f2d094b2c.bin

  • Size

    1.1MB

  • Sample

    230703-bky7tsec29

  • MD5

    5df0b78b716ad14defa041a998cd8388

  • SHA1

    342cbe7b26e6217f2f4eeb1e277ad43c3407c945

  • SHA256

    45ff94920f4dc2893fdbed9b3286d36638075098bcb5bbe92e04e181627f2d4b

  • SHA512

    76b2903e93b4e61743918b7b51e2acaa7fd12940a37da8937cd18cc9366c7b9852815b64b2e37880928f844302b417a8383adcf99da6e9ef30719458a65d01f7

  • SSDEEP

    24576:f7WsYoIB6UFAca6WsQ7Uii2Izcy+9kADwEdrKLJbLKk8Uj0hkd9qgIi:zWzIueQQgB+dwWG1XKkgkd9qg

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Targets

    • Target

      dfc754e4d0cb65246e8d8ba98fb4b79bc200960116292694417d08f158eea015.exe

    • Size

      1.2MB

    • MD5

      424c177d6e52272e7f7d2b8f2d094b2c

    • SHA1

      f0c972c9edc725c2b72a3f365a34de15e6de21e7

    • SHA256

      dfc754e4d0cb65246e8d8ba98fb4b79bc200960116292694417d08f158eea015

    • SHA512

      280e52ef20d2195a08f0b16427d50c6ffffc521ffd3293c365ed49094adc9ada44e64bd9d7d47fc4ef77ee74037580b3165abbc56107d948ecc95fabd7df84fd

    • SSDEEP

      24576:OfOy+60hyd6ZKQqExFfg/fF1fFbe9W1rARpJjBBp/D:OGe0UIkpExFfglZQm2pvBp

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks