General

  • Target

    8a7005d722fa82a3e34421a0250057beff43176bccfcdfb7dca03ddcf4837eee

  • Size

    348KB

  • Sample

    240503-fytlqaga5s

  • MD5

    e0c5d3af638b5efac5555778cceaf9dd

  • SHA1

    2899200747caafcebe97a77ed2a22b7a9c4dd228

  • SHA256

    8a7005d722fa82a3e34421a0250057beff43176bccfcdfb7dca03ddcf4837eee

  • SHA512

    865f7529b578d1c3b51eec2714b2493215eb91bbc6dae3cd90fdc187f338e21529ed9cb1a825b47212e7dc8e30fb55864cd88ab67a9c6ba6b18b67a73681c42a

  • SSDEEP

    6144:RSDruUsCv9jrohPkc/qA72cg1jbUzxtI:R4hv9jc5CKP

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      8a7005d722fa82a3e34421a0250057beff43176bccfcdfb7dca03ddcf4837eee

    • Size

      348KB

    • MD5

      e0c5d3af638b5efac5555778cceaf9dd

    • SHA1

      2899200747caafcebe97a77ed2a22b7a9c4dd228

    • SHA256

      8a7005d722fa82a3e34421a0250057beff43176bccfcdfb7dca03ddcf4837eee

    • SHA512

      865f7529b578d1c3b51eec2714b2493215eb91bbc6dae3cd90fdc187f338e21529ed9cb1a825b47212e7dc8e30fb55864cd88ab67a9c6ba6b18b67a73681c42a

    • SSDEEP

      6144:RSDruUsCv9jrohPkc/qA72cg1jbUzxtI:R4hv9jc5CKP

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks