Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50e85440ff3489a4756b6b94658243eee33fb7d477b539a00301dde70f50a71c

  • Size

    310KB

  • Sample

    240621-mx4hvszhnq

  • MD5

    58511823a6e326fdea8e0afa38596a38

  • SHA1

    450bd007eb1ce60d4c7d6c42e7dcf472a959e15f

  • SHA256

    50e85440ff3489a4756b6b94658243eee33fb7d477b539a00301dde70f50a71c

  • SHA512

    21c907bad23adc048eb4e4a9b5626cefde01f557b2cfcaf0228ab2b4ff80ada9017147f4755542edd67d81d82a37145ab30b9563e5da0f963071d4b23860eb77

  • SSDEEP

    3072:VflUwFVMHKLuF5NmXbYB6F8oKHTVrsRhUDupAmdm+kubZa6IBbBN/BJhgw/M87z2:YwFVMHwS5N/8Fgz+vjQ+fNT85/

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      50e85440ff3489a4756b6b94658243eee33fb7d477b539a00301dde70f50a71c

    • Size

      310KB

    • MD5

      58511823a6e326fdea8e0afa38596a38

    • SHA1

      450bd007eb1ce60d4c7d6c42e7dcf472a959e15f

    • SHA256

      50e85440ff3489a4756b6b94658243eee33fb7d477b539a00301dde70f50a71c

    • SHA512

      21c907bad23adc048eb4e4a9b5626cefde01f557b2cfcaf0228ab2b4ff80ada9017147f4755542edd67d81d82a37145ab30b9563e5da0f963071d4b23860eb77

    • SSDEEP

      3072:VflUwFVMHKLuF5NmXbYB6F8oKHTVrsRhUDupAmdm+kubZa6IBbBN/BJhgw/M87z2:YwFVMHwS5N/8Fgz+vjQ+fNT85/

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks