gcleaner | ecc08ddf2b1aba203b7b78161b5e28ecddb999b7848b94bcfc4dc8af7aab8577 | Triage

Sharing

General

Target

ecc08ddf2b1aba203b7b78161b5e28ecddb999b7848b94bcfc4dc8af7aab8577
Size

1.6MB
Sample

240620-as4xlstbnk
MD5

2e51a603625cdb8d2aa1634487d58c06
SHA1

956258deffe1ea79ab7b53abca183e9e54c646f1
SHA256

ecc08ddf2b1aba203b7b78161b5e28ecddb999b7848b94bcfc4dc8af7aab8577
SHA512

3fab9ca38ed32a2215bbd10c330123019a4e5727c65ac978b0181c41a4c9d058602f57e17eb7a303737136a641e6e7590817d648a19ef9835bb4609a89bde35b
SSDEEP

24576:QXYS1lfPlTqjaLZpgozbAc6a8WeRQpsr9R6fHCe:QoqV9TqjaLZpR2/RC/Ce

Score

10^/10

gcleaner loader

Malware Config

Extracted

Family

gcleaner

C2

85.208.136.148

85.208.136.56

85.208.136.48

85.208.136.87

Attributes

url_path
/x.php
/soft.php
/soft.php

Targets

- Target
  
  ecc08ddf2b1aba203b7b78161b5e28ecddb999b7848b94bcfc4dc8af7aab8577
- Size
  
  1.6MB
- MD5
  
  2e51a603625cdb8d2aa1634487d58c06
- SHA1
  
  956258deffe1ea79ab7b53abca183e9e54c646f1
- SHA256
  
  ecc08ddf2b1aba203b7b78161b5e28ecddb999b7848b94bcfc4dc8af7aab8577
- SHA512
  
  3fab9ca38ed32a2215bbd10c330123019a4e5727c65ac978b0181c41a4c9d058602f57e17eb7a303737136a641e6e7590817d648a19ef9835bb4609a89bde35b
- SSDEEP
  
  24576:QXYS1lfPlTqjaLZpgozbAc6a8WeRQpsr9R6fHCe:QoqV9TqjaLZpR2/RC/Ce
Score

10^/10

gcleaner loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2