General

  • Target

    a70e11ed1b3aa337c6272b5864769f3c

  • Size

    225KB

  • Sample

    240221-al71page6z

  • MD5

    a70e11ed1b3aa337c6272b5864769f3c

  • SHA1

    61ac3e7e94d1b614b401c822e1b07393279a4b95

  • SHA256

    f571ec60e80f59ca67e085d6578306da2af3de4e3c9b48714dc20ade153fed35

  • SHA512

    a55e4837581a7519fb6c2ce28378f0fed30c568923cb1b337d015640e6f919cc09bcc5392c383c87d2acec4fed53b762aa39bfafcbcec158731d7f4bf6203c66

  • SSDEEP

    3072:OVAVoWAdJjShT30saCKi5TeOZtNVQ0lNgijZlHNcumxSjGcrvia0CB67r1Kk3SW:OqV9AXuhTks/Kuf9tlNBjzy/RcrQC4

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.115

Targets

    • Target

      a70e11ed1b3aa337c6272b5864769f3c

    • Size

      225KB

    • MD5

      a70e11ed1b3aa337c6272b5864769f3c

    • SHA1

      61ac3e7e94d1b614b401c822e1b07393279a4b95

    • SHA256

      f571ec60e80f59ca67e085d6578306da2af3de4e3c9b48714dc20ade153fed35

    • SHA512

      a55e4837581a7519fb6c2ce28378f0fed30c568923cb1b337d015640e6f919cc09bcc5392c383c87d2acec4fed53b762aa39bfafcbcec158731d7f4bf6203c66

    • SSDEEP

      3072:OVAVoWAdJjShT30saCKi5TeOZtNVQ0lNgijZlHNcumxSjGcrvia0CB67r1Kk3SW:OqV9AXuhTks/Kuf9tlNBjzy/RcrQC4

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

MITRE ATT&CK Matrix

Tasks