Overview

overview

10

Static

static

3

ec884a36d0...18.exe

windows7-x64

10

ec884a36d0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec884a36d0759ffcaa1f91e11b500d9e_JaffaCakes118

  • Size

    425KB

  • Sample

    240411-dhwp2adf8x

  • MD5

    ec884a36d0759ffcaa1f91e11b500d9e

  • SHA1

    60da167fabcdf85b0c9ffccfbc87b82d0054d3d6

  • SHA256

    9db74178d1441af7488bef5d9f4d0defb036d7db60a90a034f9119e0d9021c7c

  • SHA512

    1326f2bc35abb2b2b24ab2b6a8e5de6e080798ac0cf8e522f3be2c842dfc486548c582166bba60ad7c941d0ec4a85c5a30a0433fe9c53e4f61ebe64acaf3df2e

  • SSDEEP

    6144:XZrkNzk+HbYGLSIl9q1UeU5V5rZNCaURt+UiFkc5hvhpizTWF+/2GjiHhkJHTE1b:1kZV7FLSIl9yI5V5KaB5hazFXpTEB

Score
10/10
gcleaneronlyloggerloader

Malware Config

Targets

    • Target

      ec884a36d0759ffcaa1f91e11b500d9e_JaffaCakes118

    • Size

      425KB

    • MD5

      ec884a36d0759ffcaa1f91e11b500d9e

    • SHA1

      60da167fabcdf85b0c9ffccfbc87b82d0054d3d6

    • SHA256

      9db74178d1441af7488bef5d9f4d0defb036d7db60a90a034f9119e0d9021c7c

    • SHA512

      1326f2bc35abb2b2b24ab2b6a8e5de6e080798ac0cf8e522f3be2c842dfc486548c582166bba60ad7c941d0ec4a85c5a30a0433fe9c53e4f61ebe64acaf3df2e

    • SSDEEP

      6144:XZrkNzk+HbYGLSIl9q1UeU5V5rZNCaURt+UiFkc5hvhpizTWF+/2GjiHhkJHTE1b:1kZV7FLSIl9yI5V5KaB5hazFXpTEB

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks