Overview

overview

10

Static

static

3

d8c62ac87b...cd.exe

windows7-x64

10

d8c62ac87b...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8c62ac87bfc863525b9ad700c3515cd

  • Size

    386KB

  • Sample

    240320-pdfnssgc66

  • MD5

    d8c62ac87bfc863525b9ad700c3515cd

  • SHA1

    ab8b036293332398b3a81d8a91089b7cb6269bac

  • SHA256

    5dd59397cd5602fe62425fd765646360de68c56ff17ddb271886bded9f975f3b

  • SHA512

    a6f679fecba89b27916eb932e45a9c1b1e31901617ec549335f9f83ebcbfbd0318ab76f004e5d76ec8b646dabec52632784678cf2275dcc893f3f49d166329a2

  • SSDEEP

    6144:2a17dKXao6I/RcKfq0Ut0pXxdWvLVnblYbyaNznhoFJEU2t:t7dKXaonnfq0UMnWTVBINzhoM

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      d8c62ac87bfc863525b9ad700c3515cd

    • Size

      386KB

    • MD5

      d8c62ac87bfc863525b9ad700c3515cd

    • SHA1

      ab8b036293332398b3a81d8a91089b7cb6269bac

    • SHA256

      5dd59397cd5602fe62425fd765646360de68c56ff17ddb271886bded9f975f3b

    • SHA512

      a6f679fecba89b27916eb932e45a9c1b1e31901617ec549335f9f83ebcbfbd0318ab76f004e5d76ec8b646dabec52632784678cf2275dcc893f3f49d166329a2

    • SSDEEP

      6144:2a17dKXao6I/RcKfq0Ut0pXxdWvLVnblYbyaNznhoFJEU2t:t7dKXaonnfq0UMnWTVBINzhoM

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks