General

  • Target

    7abcdb299bb3f4f80b10960bc44d25c84052f5ce4dd245bb9b431e41d85a1bd6

  • Size

    327KB

  • Sample

    240503-afcycsaa6w

  • MD5

    3daa3e9d2e2a8ba8750c920e0b412195

  • SHA1

    e7b66bdfb967d2c89b07d63953c605866fd405d5

  • SHA256

    7abcdb299bb3f4f80b10960bc44d25c84052f5ce4dd245bb9b431e41d85a1bd6

  • SHA512

    65118b051cd7e479a8e63f230465fcde963ad656dd4f5e33ffeaaefd93fec94f35492b51986b0856179432a83b3405761df93570096988f92d65d05ac78482b4

  • SSDEEP

    3072:MzbTHyqClMr/0zYOieJ9XL/mBbi4UjN5lXvD0XqE5cgXMUHQE5PUiLiI:aHyqISkwQm1i97WqBgXM8hfd

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      7abcdb299bb3f4f80b10960bc44d25c84052f5ce4dd245bb9b431e41d85a1bd6

    • Size

      327KB

    • MD5

      3daa3e9d2e2a8ba8750c920e0b412195

    • SHA1

      e7b66bdfb967d2c89b07d63953c605866fd405d5

    • SHA256

      7abcdb299bb3f4f80b10960bc44d25c84052f5ce4dd245bb9b431e41d85a1bd6

    • SHA512

      65118b051cd7e479a8e63f230465fcde963ad656dd4f5e33ffeaaefd93fec94f35492b51986b0856179432a83b3405761df93570096988f92d65d05ac78482b4

    • SSDEEP

      3072:MzbTHyqClMr/0zYOieJ9XL/mBbi4UjN5lXvD0XqE5cgXMUHQE5PUiLiI:aHyqISkwQm1i97WqBgXM8hfd

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks