General

  • Target

    de4a3803326e013bdcfdd0183fa1f75c1b9a0310bbc07af03cf44fd2796bb090

  • Size

    299KB

  • Sample

    240430-htg38seh72

  • MD5

    d272494c8d9fba9c47d6b3c1211edc7e

  • SHA1

    511c295358775af70224aeb4f359b5cfeddb2068

  • SHA256

    de4a3803326e013bdcfdd0183fa1f75c1b9a0310bbc07af03cf44fd2796bb090

  • SHA512

    1d2b95e2ee6e9e411e51dc167803c789c668f5c5b4b3b76c99c3e9086c7f7bbeb83f723fa2aba04445bc3baf32e5919294f48a219ee17da6cb6e11a49a97eaf1

  • SSDEEP

    6144:mcPcu1bQ38teKgnrIK8bWoLXqpCloiRrQKqPriK7wmV:mOcUQ38t3Oz84pClosJmV

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      de4a3803326e013bdcfdd0183fa1f75c1b9a0310bbc07af03cf44fd2796bb090

    • Size

      299KB

    • MD5

      d272494c8d9fba9c47d6b3c1211edc7e

    • SHA1

      511c295358775af70224aeb4f359b5cfeddb2068

    • SHA256

      de4a3803326e013bdcfdd0183fa1f75c1b9a0310bbc07af03cf44fd2796bb090

    • SHA512

      1d2b95e2ee6e9e411e51dc167803c789c668f5c5b4b3b76c99c3e9086c7f7bbeb83f723fa2aba04445bc3baf32e5919294f48a219ee17da6cb6e11a49a97eaf1

    • SSDEEP

      6144:mcPcu1bQ38teKgnrIK8bWoLXqpCloiRrQKqPriK7wmV:mOcUQ38t3Oz84pClosJmV

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

MITRE ATT&CK Enterprise v15

Tasks