General

  • Target

    3ffdada986edc6412a966b49b35d63b38d836252f77c4c6488b3b564653f3af7.zip

  • Size

    172KB

  • Sample

    240402-mm35cafb71

  • MD5

    7686d97a6b4a394ab6778b2a7cc3dbef

  • SHA1

    47515e439f72148ba269f3a2c2c434c3e8fc7b3d

  • SHA256

    a97d238ec0dedbe4652d751cf3c0618dc604ec7e1810b0201d72a3c7407a7e04

  • SHA512

    3bc7b78faaee5914ce6f738874b4c5729c3b01032c3fb74cb380e18bbe0e21ca7969ae912b6c94bdcd69268a2abd7032c51d5d4f22b5d084eaecf3cf4c498aa1

  • SSDEEP

    3072:5SOb5ATaIbTPVKLx8NiRxX2DJVEs135DQnRY83A4pn+E0+sdu8U6pclFFFy3vJUa:AA5AdYLKNiRxEVPSQ4p+2SU6pcLy/

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.115

Targets

    • Target

      3ffdada986edc6412a966b49b35d63b38d836252f77c4c6488b3b564653f3af7.exe

    • Size

      259KB

    • MD5

      5ef4cf46165c932ee117830e7cd38ccf

    • SHA1

      d45fc4a83fcd2a1fec421d55635d51bf02646d37

    • SHA256

      3ffdada986edc6412a966b49b35d63b38d836252f77c4c6488b3b564653f3af7

    • SHA512

      33a5d66a67e4e81b105a7ce4f4e4c82fb5d42cd8d3de4b0ac42f2cf2825b65d3699d7987ecbd323de69a7ac72227e9f934c73478c48ab9add9fa6bf7edd536be

    • SSDEEP

      6144:crMgT9iXeD45U2VHSmAuLfNqeo7FGN1MFlsWY:QT9iXg45UAHJjNqeWFLc

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks