General

  • Target

    b2ee4be32e821e43740b761c9af6f2b3

  • Size

    287KB

  • Sample

    240304-x87d1abb4z

  • MD5

    b2ee4be32e821e43740b761c9af6f2b3

  • SHA1

    145034842e7117eb3d3fdbaf2045317e63a905a3

  • SHA256

    b5abf9dbae00955215b4a5b71726fad90bfa64111603707e468d764c7c4ac470

  • SHA512

    3ffa3bf94a3ab97c847096c6446ac51cd9b8feaecb820678845d147654fcdb25414611a05fe8ec5b78b22774c8bdcb72f1cf1e470ab0321123e4e4f6493436c6

  • SSDEEP

    6144:hHiM0Z3LxnW7qh8phWwP2p+T+WKl6UeY7THlQz7yq:j0R1W7qhlwP2wAneY7THlSZ

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      b2ee4be32e821e43740b761c9af6f2b3

    • Size

      287KB

    • MD5

      b2ee4be32e821e43740b761c9af6f2b3

    • SHA1

      145034842e7117eb3d3fdbaf2045317e63a905a3

    • SHA256

      b5abf9dbae00955215b4a5b71726fad90bfa64111603707e468d764c7c4ac470

    • SHA512

      3ffa3bf94a3ab97c847096c6446ac51cd9b8feaecb820678845d147654fcdb25414611a05fe8ec5b78b22774c8bdcb72f1cf1e470ab0321123e4e4f6493436c6

    • SSDEEP

      6144:hHiM0Z3LxnW7qh8phWwP2p+T+WKl6UeY7THlQz7yq:j0R1W7qhlwP2wAneY7THlSZ

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks