General

  • Target

    df2df78590c17a518776cfdb698abc150240a401f43f2e296ddc9533c4492fd8

  • Size

    335KB

  • Sample

    240503-3vkwqsbf62

  • MD5

    100a5be1ff5dd6b302d5b850d3ffec9c

  • SHA1

    00e7d5f89e70899450650f11322b046a6fe4ccd0

  • SHA256

    df2df78590c17a518776cfdb698abc150240a401f43f2e296ddc9533c4492fd8

  • SHA512

    09eb75a83234bb58ac846792f59082bcc95e409df194901012747c77c604067528cdbd299e9f366b1727dc1ff6225ceac22e7ac90a62fd0054dc3d57eb47533c

  • SSDEEP

    6144:UURN9/AbX6J8uR0xqL6EZZmi+wHcohK8:pRNtA/+Zmi+IK8

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      df2df78590c17a518776cfdb698abc150240a401f43f2e296ddc9533c4492fd8

    • Size

      335KB

    • MD5

      100a5be1ff5dd6b302d5b850d3ffec9c

    • SHA1

      00e7d5f89e70899450650f11322b046a6fe4ccd0

    • SHA256

      df2df78590c17a518776cfdb698abc150240a401f43f2e296ddc9533c4492fd8

    • SHA512

      09eb75a83234bb58ac846792f59082bcc95e409df194901012747c77c604067528cdbd299e9f366b1727dc1ff6225ceac22e7ac90a62fd0054dc3d57eb47533c

    • SSDEEP

      6144:UURN9/AbX6J8uR0xqL6EZZmi+wHcohK8:pRNtA/+Zmi+IK8

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks