Overview

overview

10

Static

static

3

d504cad5bc...13.exe

windows7-x64

10

d504cad5bc...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d504cad5bcba47048c388333885f9f13

  • Size

    305KB

  • Sample

    240319-dak9bsfe48

  • MD5

    d504cad5bcba47048c388333885f9f13

  • SHA1

    33e362573da735358b0376e786d948f5a633286f

  • SHA256

    ca21f244e68de897460be7c7cf7ef53370fef13e49c8bab870d6a67702a1afef

  • SHA512

    b0c58fec3dae3b919c8f937028927cc00f38c8396a861166b585d706f628c0fe5f24500e05b921578083519ed49b93426c916c71d7e46f85ceedefbd3ded1897

  • SSDEEP

    6144:TpLFJZvPqVlL0Nm4wvIHkkgFVg8uNsIY6xA:TphJ43IevPBhB

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

194.145.227.161

Targets

    • Target

      d504cad5bcba47048c388333885f9f13

    • Size

      305KB

    • MD5

      d504cad5bcba47048c388333885f9f13

    • SHA1

      33e362573da735358b0376e786d948f5a633286f

    • SHA256

      ca21f244e68de897460be7c7cf7ef53370fef13e49c8bab870d6a67702a1afef

    • SHA512

      b0c58fec3dae3b919c8f937028927cc00f38c8396a861166b585d706f628c0fe5f24500e05b921578083519ed49b93426c916c71d7e46f85ceedefbd3ded1897

    • SSDEEP

      6144:TpLFJZvPqVlL0Nm4wvIHkkgFVg8uNsIY6xA:TphJ43IevPBhB

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks