Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c812c6802ac48f69ba5b932192198040a7d038bcde331428ebecca2ca6cbf2a

  • Size

    279KB

  • Sample

    240523-2h9hwsbf39

  • MD5

    3dd1ebcf1d7120c17449010ccb981841

  • SHA1

    c88c6c61bb2fcd3f31c672e479f32fc567c83579

  • SHA256

    0c812c6802ac48f69ba5b932192198040a7d038bcde331428ebecca2ca6cbf2a

  • SHA512

    219b817a6b8bd117bfd7acae0849f31c2c9d85f7f56148462f554658e2c239d6a6f6821bdfd345ee9862ab75a742641edfaebc7e59d901bdfa52ad6ee94b8e50

  • SSDEEP

    3072:aGKqnDTBxkhPS/UmpJ8+098F8TpClyYJSJJZ6sDf+yZY3QLSqOZPgktALnkBqGIh:aGKOkwN828Uh4vZ6spa3QuXZPgcDUc

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

5.42.65.64

Targets

    • Target

      0c812c6802ac48f69ba5b932192198040a7d038bcde331428ebecca2ca6cbf2a

    • Size

      279KB

    • MD5

      3dd1ebcf1d7120c17449010ccb981841

    • SHA1

      c88c6c61bb2fcd3f31c672e479f32fc567c83579

    • SHA256

      0c812c6802ac48f69ba5b932192198040a7d038bcde331428ebecca2ca6cbf2a

    • SHA512

      219b817a6b8bd117bfd7acae0849f31c2c9d85f7f56148462f554658e2c239d6a6f6821bdfd345ee9862ab75a742641edfaebc7e59d901bdfa52ad6ee94b8e50

    • SSDEEP

      3072:aGKqnDTBxkhPS/UmpJ8+098F8TpClyYJSJJZ6sDf+yZY3QLSqOZPgktALnkBqGIh:aGKOkwN828Uh4vZ6spa3QuXZPgcDUc

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks