Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40b7a5547cb78ab089be4eb83f00581450b75a8d52fdedb0f01f4c254642126e

  • Size

    269KB

  • Sample

    240523-3a1rfsda99

  • MD5

    9cdfb58a788ef0de72a1a0bf67abb5d8

  • SHA1

    28a02c8e8224fe6cb02c34cc7c9a3f48da8a6fef

  • SHA256

    40b7a5547cb78ab089be4eb83f00581450b75a8d52fdedb0f01f4c254642126e

  • SHA512

    1871dd359b5be3b93891223dfc5ddf0cf8d2b348b81a6839d3dfaced45a61e1b5a25a36d35c214d575cdf5094c42f0dc738c37c4037a6fab47ac2011b03fc8af

  • SSDEEP

    3072:ptTEKScbbDXlgK2l56N6VEeVOuc3wNIF1pgGGbPY7X8f6kgo050uf9IOCXZ:wKN2eAhOAIFUvwAf6kgsufG

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64
Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      40b7a5547cb78ab089be4eb83f00581450b75a8d52fdedb0f01f4c254642126e

    • Size

      269KB

    • MD5

      9cdfb58a788ef0de72a1a0bf67abb5d8

    • SHA1

      28a02c8e8224fe6cb02c34cc7c9a3f48da8a6fef

    • SHA256

      40b7a5547cb78ab089be4eb83f00581450b75a8d52fdedb0f01f4c254642126e

    • SHA512

      1871dd359b5be3b93891223dfc5ddf0cf8d2b348b81a6839d3dfaced45a61e1b5a25a36d35c214d575cdf5094c42f0dc738c37c4037a6fab47ac2011b03fc8af

    • SSDEEP

      3072:ptTEKScbbDXlgK2l56N6VEeVOuc3wNIF1pgGGbPY7X8f6kgo050uf9IOCXZ:wKN2eAhOAIFUvwAf6kgsufG

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks