General

  • Target

    a2f5ec3308212deca402cc142b9abf99

  • Size

    365KB

  • Sample

    240225-fnb9paca38

  • MD5

    a2f5ec3308212deca402cc142b9abf99

  • SHA1

    09d9ec17ea12adf3cd9fde172de038ab923ecd89

  • SHA256

    d00d061df7e1755564365a54aca6f255d58d58be7791465c0a07bd3033e1a223

  • SHA512

    9ca4a5457913239c951b4b838c913df19b54e259ae43d763fd60cb32581d877727b15bee7a40697bba4052de5605a8b8b03309acc6fb4804e3163647254e3901

  • SSDEEP

    6144:2TLiQ9OX7t6rnqbkVCqtcZJEfC4uBYCxIanX59EPCmK:kdOfk5Kl4uBiaX59Y

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      a2f5ec3308212deca402cc142b9abf99

    • Size

      365KB

    • MD5

      a2f5ec3308212deca402cc142b9abf99

    • SHA1

      09d9ec17ea12adf3cd9fde172de038ab923ecd89

    • SHA256

      d00d061df7e1755564365a54aca6f255d58d58be7791465c0a07bd3033e1a223

    • SHA512

      9ca4a5457913239c951b4b838c913df19b54e259ae43d763fd60cb32581d877727b15bee7a40697bba4052de5605a8b8b03309acc6fb4804e3163647254e3901

    • SSDEEP

      6144:2TLiQ9OX7t6rnqbkVCqtcZJEfC4uBYCxIanX59EPCmK:kdOfk5Kl4uBiaX59Y

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks