Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b69f0bb786ad98712c72c0d7c3272097462408d28860cb1bc3178f2550cc734c

  • Size

    249KB

  • Sample

    240521-jvp1xadg25

  • MD5

    48f76e2a8670044eef4c291f466b04d5

  • SHA1

    002a850434201820e46606a4b7e84dae0c89e680

  • SHA256

    b69f0bb786ad98712c72c0d7c3272097462408d28860cb1bc3178f2550cc734c

  • SHA512

    78d90b1ccb487ace0e56be84e7243d06ffa5f77a9b52b61f7e14d50114e93cbadf87e85e9087d27102ad1f31721d4f86be02785de9213be0ec2ce24b8b268715

  • SSDEEP

    3072:7kqh9r/TOuW9dtETLiG2bA5n5+3mRXLC6ChRd8iVvt4wDFLv8C35g:7rPr/lgdCnw+5vRbCjhRyml6

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      b69f0bb786ad98712c72c0d7c3272097462408d28860cb1bc3178f2550cc734c

    • Size

      249KB

    • MD5

      48f76e2a8670044eef4c291f466b04d5

    • SHA1

      002a850434201820e46606a4b7e84dae0c89e680

    • SHA256

      b69f0bb786ad98712c72c0d7c3272097462408d28860cb1bc3178f2550cc734c

    • SHA512

      78d90b1ccb487ace0e56be84e7243d06ffa5f77a9b52b61f7e14d50114e93cbadf87e85e9087d27102ad1f31721d4f86be02785de9213be0ec2ce24b8b268715

    • SSDEEP

      3072:7kqh9r/TOuW9dtETLiG2bA5n5+3mRXLC6ChRd8iVvt4wDFLv8C35g:7rPr/lgdCnw+5vRbCjhRyml6

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks