General

  • Target

    0fc67f495a04b48f0fe076dbb0201e3579db3539a78b0c693118a22a8c033221

  • Size

    1.7MB

  • Sample

    240508-ak1vzsgc6v

  • MD5

    375276dc36462e56aafaaa02cf5be31b

  • SHA1

    781e00dc383f13d998a71d76c380e66b83e41338

  • SHA256

    0fc67f495a04b48f0fe076dbb0201e3579db3539a78b0c693118a22a8c033221

  • SHA512

    027d154acd29c55a28f7426ea447bef30b1a8f11fb26c4f362bc8f29c26703f424c665c1e86044df966ade630f47a71566e5ba5f89471f2e1ae9231ac4cf6c79

  • SSDEEP

    24576:K5IJ0cilH+RpX/Mw4pcIv4GCo+gRPbJvBkcfVDAZJd4knJDdHmuds/Bt:KIiu4iYo2JJvX+lJDdsD

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.51

45.12.253.92

45.12.253.89

45.12.253.55

Attributes
  • url_path

    /done.php

    /delivery.php

    /delivery.php

Targets

    • Target

      0fc67f495a04b48f0fe076dbb0201e3579db3539a78b0c693118a22a8c033221

    • Size

      1.7MB

    • MD5

      375276dc36462e56aafaaa02cf5be31b

    • SHA1

      781e00dc383f13d998a71d76c380e66b83e41338

    • SHA256

      0fc67f495a04b48f0fe076dbb0201e3579db3539a78b0c693118a22a8c033221

    • SHA512

      027d154acd29c55a28f7426ea447bef30b1a8f11fb26c4f362bc8f29c26703f424c665c1e86044df966ade630f47a71566e5ba5f89471f2e1ae9231ac4cf6c79

    • SSDEEP

      24576:K5IJ0cilH+RpX/Mw4pcIv4GCo+gRPbJvBkcfVDAZJd4knJDdHmuds/Bt:KIiu4iYo2JJvX+lJDdsD

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

MITRE ATT&CK Matrix

Tasks