General

  • Target

    acf1c83753fc59e450c753703aae39a6

  • Size

    221KB

  • Sample

    240228-1qmteseg5t

  • MD5

    acf1c83753fc59e450c753703aae39a6

  • SHA1

    de798e6e4eb8a54196668ca35d07d178b645c7ca

  • SHA256

    84997c9fb279e991977d3c78aeb5c27a36a66a1e5d92963dfe3ff910a0b5c4f9

  • SHA512

    ca9037926094cdb3e607ae93a62d098a9d590acbe55141e2048ffcbb7d874ce4c6a8824e7098c45640e45e275ccbcbafa48c62e8456cfafeb15fa54a38955805

  • SSDEEP

    3072:PbnNYGHU9936I0sKY565sQOuU2y8R5FNIzsI5/DuT61m+:PrNYGHU9d302565sQxU2ZUsI5/N

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      acf1c83753fc59e450c753703aae39a6

    • Size

      221KB

    • MD5

      acf1c83753fc59e450c753703aae39a6

    • SHA1

      de798e6e4eb8a54196668ca35d07d178b645c7ca

    • SHA256

      84997c9fb279e991977d3c78aeb5c27a36a66a1e5d92963dfe3ff910a0b5c4f9

    • SHA512

      ca9037926094cdb3e607ae93a62d098a9d590acbe55141e2048ffcbb7d874ce4c6a8824e7098c45640e45e275ccbcbafa48c62e8456cfafeb15fa54a38955805

    • SSDEEP

      3072:PbnNYGHU9936I0sKY565sQOuU2y8R5FNIzsI5/DuT61m+:PrNYGHU9d302565sQxU2ZUsI5/N

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks