General

  • Target

    b5f49db3a9a421773d2eeade6f52bb33

  • Size

    254KB

  • Sample

    240305-3qn3ladh68

  • MD5

    b5f49db3a9a421773d2eeade6f52bb33

  • SHA1

    08dfa30ef726c80d85e4d803b348a418cf0cadc1

  • SHA256

    5049169b6ddfd46c25ef01b29a760453ac36534b7e033364a297be7efeaa6fc8

  • SHA512

    2078ce819db2f3e6403e2d9f4822dffdd2cd9857cca41cb391c28675265d8e6af9ffc5df00ad4a9fae01628656e4cdf3a1fe02dadd683c6c015bda8ae92066ec

  • SSDEEP

    6144:vRLAO5dsfvu4FmAejqCHa/RVSV2RVn+Jc/m/:vREO5r4kAEqJ5VSV2RP

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      b5f49db3a9a421773d2eeade6f52bb33

    • Size

      254KB

    • MD5

      b5f49db3a9a421773d2eeade6f52bb33

    • SHA1

      08dfa30ef726c80d85e4d803b348a418cf0cadc1

    • SHA256

      5049169b6ddfd46c25ef01b29a760453ac36534b7e033364a297be7efeaa6fc8

    • SHA512

      2078ce819db2f3e6403e2d9f4822dffdd2cd9857cca41cb391c28675265d8e6af9ffc5df00ad4a9fae01628656e4cdf3a1fe02dadd683c6c015bda8ae92066ec

    • SSDEEP

      6144:vRLAO5dsfvu4FmAejqCHa/RVSV2RVn+Jc/m/:vREO5r4kAEqJ5VSV2RP

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks