General

  • Target

    c8143dee4a9f37b2414be0e924a3069f46d122d9be8cb94e8ef119eeef10d4f2

  • Size

    222KB

  • Sample

    240711-psrdvawflm

  • MD5

    2256f9ad822d36b19d38a33242049988

  • SHA1

    adf2754bf11c0d714b9bb3cb43b0e2fb820ebd05

  • SHA256

    c8143dee4a9f37b2414be0e924a3069f46d122d9be8cb94e8ef119eeef10d4f2

  • SHA512

    a1a65e79b59f8cf2986c5c490d72edcbf55c0a9fe548013dc7ab60458fa6e729e39b596b810fcad7a018fab911222f09291ff2a4d23461604dafa10aa71172b7

  • SSDEEP

    3072:6RuLMBsrDdxmxsGtHJzOAmXSPrCDdackcFw3J9TIkPA8W8Pa56Q0hB4LzAMnbxHP:LLYsaVjPkdackcFfkP55jHETF

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

185.172.128.69

Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      c8143dee4a9f37b2414be0e924a3069f46d122d9be8cb94e8ef119eeef10d4f2

    • Size

      222KB

    • MD5

      2256f9ad822d36b19d38a33242049988

    • SHA1

      adf2754bf11c0d714b9bb3cb43b0e2fb820ebd05

    • SHA256

      c8143dee4a9f37b2414be0e924a3069f46d122d9be8cb94e8ef119eeef10d4f2

    • SHA512

      a1a65e79b59f8cf2986c5c490d72edcbf55c0a9fe548013dc7ab60458fa6e729e39b596b810fcad7a018fab911222f09291ff2a4d23461604dafa10aa71172b7

    • SSDEEP

      3072:6RuLMBsrDdxmxsGtHJzOAmXSPrCDdackcFw3J9TIkPA8W8Pa56Q0hB4LzAMnbxHP:LLYsaVjPkdackcFfkP55jHETF

    Score
    10/10
    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks