General

  • Target

    2425524198f9e1a60ab61cd475ce7339_JaffaCakes118

  • Size

    431KB

  • Sample

    240329-rj2jkaah66

  • MD5

    2425524198f9e1a60ab61cd475ce7339

  • SHA1

    5e92ecafaaf2c09b46b9bfda7d1d6ae581a4c07f

  • SHA256

    4b1ea1e30676c44d8d42c18df796fa4ddefe4fa00c68922a3db3d109d09475f6

  • SHA512

    7ffbfdaa311c556d6e4419d26faa866545e541c7f0d3dcde041d5f63b02cd2d75b5269f7e0ef3204f7179b6413917f5373fd907e085d8a48f950c841233a15f3

  • SSDEEP

    12288:I9bom+DIp0dO/XQh/P9kM0t0hbMwEfwr4jmQZ:I9HWICMXQh/Pp0EEfwr

Malware Config

Extracted

Family

gcleaner

C2

ppp-gl.biz

45.9.20.13

Targets

    • Target

      2425524198f9e1a60ab61cd475ce7339_JaffaCakes118

    • Size

      431KB

    • MD5

      2425524198f9e1a60ab61cd475ce7339

    • SHA1

      5e92ecafaaf2c09b46b9bfda7d1d6ae581a4c07f

    • SHA256

      4b1ea1e30676c44d8d42c18df796fa4ddefe4fa00c68922a3db3d109d09475f6

    • SHA512

      7ffbfdaa311c556d6e4419d26faa866545e541c7f0d3dcde041d5f63b02cd2d75b5269f7e0ef3204f7179b6413917f5373fd907e085d8a48f950c841233a15f3

    • SSDEEP

      12288:I9bom+DIp0dO/XQh/P9kM0t0hbMwEfwr4jmQZ:I9HWICMXQh/Pp0EEfwr

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Matrix

Tasks