Overview

overview

10

Static

static

3

ed9c6713e1...18.exe

windows7-x64

10

ed9c6713e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed9c6713e17769faaf3f2f9d610cd495_JaffaCakes118

  • Size

    372KB

  • Sample

    240411-rkcxlagc7x

  • MD5

    ed9c6713e17769faaf3f2f9d610cd495

  • SHA1

    a9da618d8f84e3eed38fc249691c88ad59c15487

  • SHA256

    6c79c3b549bdea13526f1365ad2253f6385531606362cc29d9dea172cd9d50cb

  • SHA512

    6ad670341e95df045976771c3e51f567b525bc302ac78233686b0f3eb58993dc4516ebdd98851f93d61a49e82e0d3cd13e46bbb1f632096cddb32d1eebcb20bd

  • SSDEEP

    6144:sJKyKNtDPNCFsGNio8kGTsNkPJWNPCkbkzL7rNdlqqKLOz9QKWHse:LZNtLEFsGNioyWA2sL/j0qKLOhQh

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      ed9c6713e17769faaf3f2f9d610cd495_JaffaCakes118

    • Size

      372KB

    • MD5

      ed9c6713e17769faaf3f2f9d610cd495

    • SHA1

      a9da618d8f84e3eed38fc249691c88ad59c15487

    • SHA256

      6c79c3b549bdea13526f1365ad2253f6385531606362cc29d9dea172cd9d50cb

    • SHA512

      6ad670341e95df045976771c3e51f567b525bc302ac78233686b0f3eb58993dc4516ebdd98851f93d61a49e82e0d3cd13e46bbb1f632096cddb32d1eebcb20bd

    • SSDEEP

      6144:sJKyKNtDPNCFsGNio8kGTsNkPJWNPCkbkzL7rNdlqqKLOz9QKWHse:LZNtLEFsGNioyWA2sL/j0qKLOhQh

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks