General

  • Target

    42a731d7e6d098c83517d8c56b2b796a

  • Size

    286KB

  • Sample

    240105-d5kw2shbhl

  • MD5

    42a731d7e6d098c83517d8c56b2b796a

  • SHA1

    e8d8a9067bf05e23eb9d3edfe690f314abbea6a9

  • SHA256

    ab762aa5935eec7c18899a7f7a8e19821c94c96ef695e4e7f26e19f9643e5f49

  • SHA512

    acde23cf806d9038516553de404ca31e6151176338aff921f741acc48dc0fed0164fc1de5f425325510d59d1f082c258cc5c16cd6a59dc17f3fe84d9f4abc60b

  • SSDEEP

    6144:K96AUpEAYtgry2sUJNsRP7OUjvFif0j0mTqsIq:dAwEAYtgrZJqBOYQf0jRMq

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      42a731d7e6d098c83517d8c56b2b796a

    • Size

      286KB

    • MD5

      42a731d7e6d098c83517d8c56b2b796a

    • SHA1

      e8d8a9067bf05e23eb9d3edfe690f314abbea6a9

    • SHA256

      ab762aa5935eec7c18899a7f7a8e19821c94c96ef695e4e7f26e19f9643e5f49

    • SHA512

      acde23cf806d9038516553de404ca31e6151176338aff921f741acc48dc0fed0164fc1de5f425325510d59d1f082c258cc5c16cd6a59dc17f3fe84d9f4abc60b

    • SSDEEP

      6144:K96AUpEAYtgry2sUJNsRP7OUjvFif0j0mTqsIq:dAwEAYtgrZJqBOYQf0jRMq

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks