Overview

overview

10

Static

static

3

fcb7559610...18.exe

windows7-x64

10

fcb7559610...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcb755961054f48694eb13170b93a195_JaffaCakes118

  • Size

    431KB

  • Sample

    240420-n3q1dsgg6v

  • MD5

    fcb755961054f48694eb13170b93a195

  • SHA1

    42c2269f390a22b283ca72158a0481416a139107

  • SHA256

    c864ec31f34d9628ff59965b1a43eb4ec2fa511a30d36fd45a862ff5efd7ad8e

  • SHA512

    c367d4318525ec3cd45b69e55c32c814f48f881368ffaf90be78b830cd74c0eec4859615d201229a50e6d12c4f228361e182b800ade82378c4632282cc873f7c

  • SSDEEP

    12288:6H2Bc9c+G8OVZqkPQItMi4IUbEbmEJyNVlmWweMMM:6HOkQPqkPQIB4IjJyNVNMMM

Score
10/10
gcleaneronlyloggerloader

Malware Config

Extracted

Family

gcleaner

C2

ppp-gl.biz

45.9.20.13

Targets

    • Target

      fcb755961054f48694eb13170b93a195_JaffaCakes118

    • Size

      431KB

    • MD5

      fcb755961054f48694eb13170b93a195

    • SHA1

      42c2269f390a22b283ca72158a0481416a139107

    • SHA256

      c864ec31f34d9628ff59965b1a43eb4ec2fa511a30d36fd45a862ff5efd7ad8e

    • SHA512

      c367d4318525ec3cd45b69e55c32c814f48f881368ffaf90be78b830cd74c0eec4859615d201229a50e6d12c4f228361e182b800ade82378c4632282cc873f7c

    • SSDEEP

      12288:6H2Bc9c+G8OVZqkPQItMi4IUbEbmEJyNVlmWweMMM:6HOkQPqkPQIB4IjJyNVNMMM

    Score
    10/10
    gcleaneronlyloggerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks