Overview

overview

10

Static

static

3

8bd934dfab...04.exe

windows7-x64

10

8bd934dfab...04.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8bd934dfab76a438ad876404a79ceaa3507babb1a62138416df1293d71f61504
  • Size 2.8MB
  • Sample231014-b2gdcaab8t
  • SHA256 8bd934dfab76a438ad876404a79ceaa3507babb1a62138416df1293d71f61504
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gcleanerloader

Malware Config

Extracted

Family

  • gcleaner

C2

  • 85.31.45.39

  • 85.31.45.250

  • 85.31.45.251

  • 85.31.45.88

Attributes
  • url_path

    /b.php

    /d.php

    /d.php

Targets

    • Target
      8bd934dfab76a438ad876404a79ceaa3507babb1a62138416df1293d71f61504
    • Size 2.8MB
    • SHA256 8bd934dfab76a438ad876404a79ceaa3507babb1a62138416df1293d71f61504
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks