General

  • Target

    a98ec0253594d14cada3f9c0b0347720

  • Size

    221KB

  • Sample

    240227-tdsqksde4s

  • MD5

    a98ec0253594d14cada3f9c0b0347720

  • SHA1

    9f56b49690cdd9308b729d6ba6fa4134c89e61fa

  • SHA256

    92b7baea3245ab0127160bdaec0b6f05901740bd40bb3adc21dcca4d238cf097

  • SHA512

    a05615828bfd009e782f7edb0fa336afc22e5865674ffcb49477a547f9b9eb42df47ee49d0513d075d50348544f0cb5c1c9352928b38d4029d0cd005a373141a

  • SSDEEP

    6144:dvqJpuyzOtLbcloC8ZzleQ7O5YTPQsI5/:dvqJ5zOtLbcCc

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      a98ec0253594d14cada3f9c0b0347720

    • Size

      221KB

    • MD5

      a98ec0253594d14cada3f9c0b0347720

    • SHA1

      9f56b49690cdd9308b729d6ba6fa4134c89e61fa

    • SHA256

      92b7baea3245ab0127160bdaec0b6f05901740bd40bb3adc21dcca4d238cf097

    • SHA512

      a05615828bfd009e782f7edb0fa336afc22e5865674ffcb49477a547f9b9eb42df47ee49d0513d075d50348544f0cb5c1c9352928b38d4029d0cd005a373141a

    • SSDEEP

      6144:dvqJpuyzOtLbcloC8ZzleQ7O5YTPQsI5/:dvqJ5zOtLbcCc

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks