Overview

overview

10

Static

static

3

1dafae27f4...df.exe

windows7-x64

10

1dafae27f4...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1dafae27f4ef80514628e3198eae0cb43b37fcee150e82d33c7ab2cf06ab29df

  • Size

    346KB

  • Sample

    240617-j8gxfsscja

  • MD5

    73492a7c03cf71fb2eb1b96bd02e49b8

  • SHA1

    d6f9a0ca2fc6f1ec9454a3c7fbfaa2ce27ea301c

  • SHA256

    1dafae27f4ef80514628e3198eae0cb43b37fcee150e82d33c7ab2cf06ab29df

  • SHA512

    283773499f4365471a716b7225444d2f3a7169936c27907cffe8ca6735dd09545e6a9f8e699eb2c8b4f00d63c5e999fe4e140aa223e014dc127957408da2fa44

  • SSDEEP

    6144:B+hMsqyZ6cNF8DTHX+u7O5bcoGJjG5WW5F6RFs7+nMVpT:fsqyZ6c7uT68BG5L5oRF++nO

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

185.172.128.69
Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      1dafae27f4ef80514628e3198eae0cb43b37fcee150e82d33c7ab2cf06ab29df

    • Size

      346KB

    • MD5

      73492a7c03cf71fb2eb1b96bd02e49b8

    • SHA1

      d6f9a0ca2fc6f1ec9454a3c7fbfaa2ce27ea301c

    • SHA256

      1dafae27f4ef80514628e3198eae0cb43b37fcee150e82d33c7ab2cf06ab29df

    • SHA512

      283773499f4365471a716b7225444d2f3a7169936c27907cffe8ca6735dd09545e6a9f8e699eb2c8b4f00d63c5e999fe4e140aa223e014dc127957408da2fa44

    • SSDEEP

      6144:B+hMsqyZ6cNF8DTHX+u7O5bcoGJjG5WW5F6RFs7+nMVpT:fsqyZ6c7uT68BG5L5oRF++nO

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks