General

  • Target

    2a4a2a81d7b64912b929d4ecfa94e2a6

  • Size

    266KB

  • Sample

    231231-gbjnnsfdap

  • MD5

    2a4a2a81d7b64912b929d4ecfa94e2a6

  • SHA1

    842428d47d16ef1f8ade0c48441c35e6bae112a1

  • SHA256

    43a30f28b31265a8bfcb084c9095a84139c3fac46f3f2ea55fcb78880609fbca

  • SHA512

    1b362325e510abe111509cd87dbe9811c20f3e84f3b95cd9666945523b96adf86af9659fccf65d85150f13dc9eae5fab1aac08554bb130a97930d054c312b1a4

  • SSDEEP

    3072:88svNt2s/gTH77qA0lHGo5kQVJ25OdMv8G1xbeRfRVIBN4URuQQuKT0yB3m4nY:Kt2NTb+A0lvxVI5OdnG3bzW3l+4

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      2a4a2a81d7b64912b929d4ecfa94e2a6

    • Size

      266KB

    • MD5

      2a4a2a81d7b64912b929d4ecfa94e2a6

    • SHA1

      842428d47d16ef1f8ade0c48441c35e6bae112a1

    • SHA256

      43a30f28b31265a8bfcb084c9095a84139c3fac46f3f2ea55fcb78880609fbca

    • SHA512

      1b362325e510abe111509cd87dbe9811c20f3e84f3b95cd9666945523b96adf86af9659fccf65d85150f13dc9eae5fab1aac08554bb130a97930d054c312b1a4

    • SSDEEP

      3072:88svNt2s/gTH77qA0lHGo5kQVJ25OdMv8G1xbeRfRVIBN4URuQQuKT0yB3m4nY:Kt2NTb+A0lvxVI5OdnG3bzW3l+4

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks