Overview

overview

10

Static

static

3

2de8d046d5...18.exe

windows7-x64

10

2de8d046d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2de8d046d57fa60509800b164868a881_JaffaCakes118

  • Size

    442KB

  • Sample

    240329-1yfp3sbf86

  • MD5

    2de8d046d57fa60509800b164868a881

  • SHA1

    905be498f9490445da60c9ee457de1e8411ce074

  • SHA256

    02883fa63667972547fe36023646554c3d2895b41c5a8683ab5b2292f5d2d464

  • SHA512

    addb7b321517a94e1c4da2835178063a739ec01fa6d2e23b8221a50b6d6371b298e5f25a4bbc13d7e3990ab6116f50907e8d7409ee123824c6579fe5f6597735

  • SSDEEP

    12288:b9i0a/2iNj0gXXj2+ZQo8zbNHrf0PBbGMpv:bG2iNjZXjhQzrf0P3

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

ppp-gl.biz

45.9.20.13

Targets

    • Target

      2de8d046d57fa60509800b164868a881_JaffaCakes118

    • Size

      442KB

    • MD5

      2de8d046d57fa60509800b164868a881

    • SHA1

      905be498f9490445da60c9ee457de1e8411ce074

    • SHA256

      02883fa63667972547fe36023646554c3d2895b41c5a8683ab5b2292f5d2d464

    • SHA512

      addb7b321517a94e1c4da2835178063a739ec01fa6d2e23b8221a50b6d6371b298e5f25a4bbc13d7e3990ab6116f50907e8d7409ee123824c6579fe5f6597735

    • SSDEEP

      12288:b9i0a/2iNj0gXXj2+ZQo8zbNHrf0PBbGMpv:bG2iNjZXjhQzrf0P3

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks