Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d56307b4d6f10389f7ae0a1c6a348ed8d6ef8dfb91c62ed8c723ad29d97ddd6

  • Size

    291KB

  • Sample

    240525-m8nxjsec51

  • MD5

    7918c9a30a3949ce19c425e3167843ef

  • SHA1

    dea528063f569989261019d1ebb95d7d611cf8b6

  • SHA256

    0d56307b4d6f10389f7ae0a1c6a348ed8d6ef8dfb91c62ed8c723ad29d97ddd6

  • SHA512

    0e02a629c0efdc7b1ea59f605da1f86fb15828fe08fbad77b83b069ea754cd4919cdc37b8518842ab4e7de3b971b2178c9c204d33b2f2a67dbbdb46ce6618fb6

  • SSDEEP

    6144:/ZP7Q96XlVELjNhYMOx8a9QqMKgrit5hderwyWamFPT:hs94ELjNKVSKP5hd8A

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      0d56307b4d6f10389f7ae0a1c6a348ed8d6ef8dfb91c62ed8c723ad29d97ddd6

    • Size

      291KB

    • MD5

      7918c9a30a3949ce19c425e3167843ef

    • SHA1

      dea528063f569989261019d1ebb95d7d611cf8b6

    • SHA256

      0d56307b4d6f10389f7ae0a1c6a348ed8d6ef8dfb91c62ed8c723ad29d97ddd6

    • SHA512

      0e02a629c0efdc7b1ea59f605da1f86fb15828fe08fbad77b83b069ea754cd4919cdc37b8518842ab4e7de3b971b2178c9c204d33b2f2a67dbbdb46ce6618fb6

    • SSDEEP

      6144:/ZP7Q96XlVELjNhYMOx8a9QqMKgrit5hderwyWamFPT:hs94ELjNKVSKP5hd8A

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks