Overview

overview

10

Static

static

3

4af89e5a1c...6f.exe

windows7-x64

10

4af89e5a1c...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e53acfafbc9041ef5bb494acf95c10b54838f9aab009531cf3ef561159498be

  • Size

    218KB

  • Sample

    240417-qyesnsbe9s

  • MD5

    2c8a8bb1bfebe7de3192623731c6737c

  • SHA1

    4fae0a983d5c3e83e32e3bd12c3d0f7de082c261

  • SHA256

    2e53acfafbc9041ef5bb494acf95c10b54838f9aab009531cf3ef561159498be

  • SHA512

    e47d7a65efd514beda7fa360bad44648d372545001ba2caf714ce4b60bf4661528c67d32646312c42be56191492bd594bd30cc2033792df4f68293eb45c193a3

  • SSDEEP

    6144:SuOBqEs/MqjjYd+ZJFXqUHtVsC1fnKTmNTpMkH2SUP9v:qXsLj3ZJFpHvblJNWkWjP9v

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.115

Targets

    • Target

      4af89e5a1cfa894ce90b1a5acb94abd36e90339e92c137d2f77d59c2e1efdb6f.exe

    • Size

      366KB

    • MD5

      c2aab8150d3d763706fbe02fe07f8aa1

    • SHA1

      96f231a59c8bfb43aa78aa43501973a52919b7df

    • SHA256

      4af89e5a1cfa894ce90b1a5acb94abd36e90339e92c137d2f77d59c2e1efdb6f

    • SHA512

      27a09c6ad7400a2bc7252d8a10180c56b0bf23656638f50e901ea4ba27037c0b31ef7770ae108b33b9f0baf61d5ec37a2834c2768a5f95a3c5e3c5b5692dae40

    • SSDEEP

      6144:CAY8rOF+nQq97PgSKA9XncgrLZEeMlFjT:CR8ru+nJ7YEXcgrLZNGF3

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks