Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

  • Size

    399KB

  • Sample

    240620-z5p2naxejd

  • MD5

    3b8e8465c4d83abf59440cc038332808

  • SHA1

    7471a99122d9a91fb6286bd34dfa35ff446893e2

  • SHA256

    d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

  • SHA512

    12e4dda6d7f687b44280b0cbe4a433378cb4318203e27d37048fe48d658a725f52f55830eb0373a43bbc11b8553b383cb48ef71ff3c6b949f36bfea917451339

  • SSDEEP

    6144:pKKLS8epklmhmEN9gVjJXwZfr7iTPhXiaLa6DLDO1KQ1KQ:AKmfpklmgEN9eNwJviTpXi+a6D

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

    • Size

      399KB

    • MD5

      3b8e8465c4d83abf59440cc038332808

    • SHA1

      7471a99122d9a91fb6286bd34dfa35ff446893e2

    • SHA256

      d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

    • SHA512

      12e4dda6d7f687b44280b0cbe4a433378cb4318203e27d37048fe48d658a725f52f55830eb0373a43bbc11b8553b383cb48ef71ff3c6b949f36bfea917451339

    • SSDEEP

      6144:pKKLS8epklmhmEN9gVjJXwZfr7iTPhXiaLa6DLDO1KQ1KQ:AKmfpklmgEN9eNwJviTpXi+a6D

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks