Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    690af0ea6aa00cefa6e879903c3c86d3ddc2ca78d9aa5b386fe1916149251a2e

  • Size

    332KB

  • Sample

    240622-vgcdfazclj

  • MD5

    b3de1474d8dde544f65b6e8c2adc3428

  • SHA1

    3b178dca35aa94ce7bc0ade07a73b5757809d35d

  • SHA256

    690af0ea6aa00cefa6e879903c3c86d3ddc2ca78d9aa5b386fe1916149251a2e

  • SHA512

    ddc2792ba2750d214efb7072e12c638dec045b24b2072365f5551dc59c6b63b59e84e4b21ba26d33f48e3d2e63aa7a5ce4c5864481dd7249f1fa516c5e5b66a0

  • SSDEEP

    6144:+8YhBQeqKnVicj9HOEmeoiKASIQgPoKVKF23M:+8YhB3qKnViYHOEmeoiNfR3

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      690af0ea6aa00cefa6e879903c3c86d3ddc2ca78d9aa5b386fe1916149251a2e

    • Size

      332KB

    • MD5

      b3de1474d8dde544f65b6e8c2adc3428

    • SHA1

      3b178dca35aa94ce7bc0ade07a73b5757809d35d

    • SHA256

      690af0ea6aa00cefa6e879903c3c86d3ddc2ca78d9aa5b386fe1916149251a2e

    • SHA512

      ddc2792ba2750d214efb7072e12c638dec045b24b2072365f5551dc59c6b63b59e84e4b21ba26d33f48e3d2e63aa7a5ce4c5864481dd7249f1fa516c5e5b66a0

    • SSDEEP

      6144:+8YhBQeqKnVicj9HOEmeoiKASIQgPoKVKF23M:+8YhB3qKnViYHOEmeoiNfR3

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks