General

  • Target

    44d30d6e283b9245d82a8e018ac8d12da5675db52fb536cb868f65808908e22e

  • Size

    381KB

  • Sample

    240410-18hmesga8w

  • MD5

    bba1a4cc39235bf1a7579bace4fb48b9

  • SHA1

    01e6280588ae925749786457c0dbb611e7b17d0a

  • SHA256

    44d30d6e283b9245d82a8e018ac8d12da5675db52fb536cb868f65808908e22e

  • SHA512

    b62a89a562472fa89ee8abf91df84c623572f785742c4df3efdd1e01ec6fb5110fdf24f0afdd93bbfa36ee52a485a6fbf57ba8106ee8b2d736446affe0e0adca

  • SSDEEP

    6144:uMreaHHzY+01nM96uAnjT8xepx1P2DCL:jzHHzY+gGdeHl

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      44d30d6e283b9245d82a8e018ac8d12da5675db52fb536cb868f65808908e22e

    • Size

      381KB

    • MD5

      bba1a4cc39235bf1a7579bace4fb48b9

    • SHA1

      01e6280588ae925749786457c0dbb611e7b17d0a

    • SHA256

      44d30d6e283b9245d82a8e018ac8d12da5675db52fb536cb868f65808908e22e

    • SHA512

      b62a89a562472fa89ee8abf91df84c623572f785742c4df3efdd1e01ec6fb5110fdf24f0afdd93bbfa36ee52a485a6fbf57ba8106ee8b2d736446affe0e0adca

    • SSDEEP

      6144:uMreaHHzY+01nM96uAnjT8xepx1P2DCL:jzHHzY+gGdeHl

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks