Overview

overview

10

Static

static

3

ce18832e3b...8b.exe

windows7-x64

10

ce18832e3b...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce18832e3bf13da6c429e205a9a6258b

  • Size

    309KB

  • Sample

    240316-pyt2xsbc4w

  • MD5

    ce18832e3bf13da6c429e205a9a6258b

  • SHA1

    e7ebeb6e91bdb4534556d41834e73425894868c2

  • SHA256

    bbfb581e3a80901fe4898887bed82764aa4457c16e1bd01f82c8d954674b7da1

  • SHA512

    dafc954685ea5a89e26a1e54f09505e9de1af67308f85e2bc44ab401d7efc7cb6322f0bd898a9b68456e6853416f814c025087f40a02f0367ec10f954037aecf

  • SSDEEP

    6144:7nexFR1d/27x9nj5mPgfwah8jO5fud6WzjUX8QV/ke0c:mb1R27x9njSgfwg8jWpW/UX8Qme0

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      ce18832e3bf13da6c429e205a9a6258b

    • Size

      309KB

    • MD5

      ce18832e3bf13da6c429e205a9a6258b

    • SHA1

      e7ebeb6e91bdb4534556d41834e73425894868c2

    • SHA256

      bbfb581e3a80901fe4898887bed82764aa4457c16e1bd01f82c8d954674b7da1

    • SHA512

      dafc954685ea5a89e26a1e54f09505e9de1af67308f85e2bc44ab401d7efc7cb6322f0bd898a9b68456e6853416f814c025087f40a02f0367ec10f954037aecf

    • SSDEEP

      6144:7nexFR1d/27x9nj5mPgfwah8jO5fud6WzjUX8QV/ke0c:mb1R27x9njSgfwg8jWpW/UX8Qme0

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks