Overview

overview

10

Static

static

3

204680ebb9...e6.exe

windows7-x64

10

204680ebb9...e6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    204680ebb902c03fc8ac63e1e8db35e6

  • Size

    294KB

  • Sample

    231230-3mysmaeebq

  • MD5

    204680ebb902c03fc8ac63e1e8db35e6

  • SHA1

    aaaa13b07e80f83aed86a269302250ec9e91902f

  • SHA256

    022cc862b01a4ea5ef46ca085f97c646a596df977d82fd56725660567e72d528

  • SHA512

    faeecfd2b16316eb0fdfe6a4f9b400073a08d19e7d60d9ddb66021cfca1a613846c7a48aa9320df29de468f7a3f90468408f6e61d9cac3e29cd9a719fc8f9c30

  • SSDEEP

    6144:LufWiuhqi10OxtTUq9zJUpxL4JcctQOL0tR1:LufWik0IjqEZQj1

Score
10/10
gcleanerloader

Malware Config

Targets

    • Target

      204680ebb902c03fc8ac63e1e8db35e6

    • Size

      294KB

    • MD5

      204680ebb902c03fc8ac63e1e8db35e6

    • SHA1

      aaaa13b07e80f83aed86a269302250ec9e91902f

    • SHA256

      022cc862b01a4ea5ef46ca085f97c646a596df977d82fd56725660567e72d528

    • SHA512

      faeecfd2b16316eb0fdfe6a4f9b400073a08d19e7d60d9ddb66021cfca1a613846c7a48aa9320df29de468f7a3f90468408f6e61d9cac3e29cd9a719fc8f9c30

    • SSDEEP

      6144:LufWiuhqi10OxtTUq9zJUpxL4JcctQOL0tR1:LufWik0IjqEZQj1

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks