General

  • Target

    434aa87c51d2cf00c0f7628f7fb65956c999ced3f6f3baaf3a773bc59596d29a

  • Size

    252KB

  • Sample

    240507-2ngp3acb3x

  • MD5

    38b81f3a7945cd32066a2752f44b5469

  • SHA1

    4948b464c7c952b5e267bb994204d103604331fb

  • SHA256

    434aa87c51d2cf00c0f7628f7fb65956c999ced3f6f3baaf3a773bc59596d29a

  • SHA512

    a9f832757a301f7bd0dc65b9867e8ec65be92afe430595dea4a2786d4b9e049bb9da16934a315f2ffdd19bebb47bf047fd84185b84315a3a7863c5271eff5f16

  • SSDEEP

    3072:TW7A5zwPtBFE01dK/4c8/gbhQxe2fo5d+I5NxyMD97tewZVB2du/Z5ylAmT:iM+jz1SXQxVAS+Nt577B2dugAmT

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      434aa87c51d2cf00c0f7628f7fb65956c999ced3f6f3baaf3a773bc59596d29a

    • Size

      252KB

    • MD5

      38b81f3a7945cd32066a2752f44b5469

    • SHA1

      4948b464c7c952b5e267bb994204d103604331fb

    • SHA256

      434aa87c51d2cf00c0f7628f7fb65956c999ced3f6f3baaf3a773bc59596d29a

    • SHA512

      a9f832757a301f7bd0dc65b9867e8ec65be92afe430595dea4a2786d4b9e049bb9da16934a315f2ffdd19bebb47bf047fd84185b84315a3a7863c5271eff5f16

    • SSDEEP

      3072:TW7A5zwPtBFE01dK/4c8/gbhQxe2fo5d+I5NxyMD97tewZVB2du/Z5ylAmT:iM+jz1SXQxVAS+Nt577B2dugAmT

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks