Overview

overview

10

Static

static

3

a985347669...18.exe

windows7-x64

10

a985347669...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a985347669f5a331f844379febdc1e9a_JaffaCakes118

  • Size

    321KB

  • Sample

    240819-epcfeaxapn

  • MD5

    a985347669f5a331f844379febdc1e9a

  • SHA1

    f74947124606530474bff0b16d858609f7c8505c

  • SHA256

    e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

  • SHA512

    c6e1b62fb6067e3beb1f87cec5964c0ddd1e536cbf9b948348921179f9ab4ec35a1c646d6fe048afd08e933da02bb6c563efbae10ebe0ca04cc72d3dc5d909b1

  • SSDEEP

    6144:fZeNLJ49BUMG2TRzEYq0Ql3xf0YnOznSZeQRpxyf+t:kW9B3rl5Ql3xULSFft

Score
10/10
gcleaneronlyloggerdiscoveryloader

Malware Config

Targets

    • Target

      a985347669f5a331f844379febdc1e9a_JaffaCakes118

    • Size

      321KB

    • MD5

      a985347669f5a331f844379febdc1e9a

    • SHA1

      f74947124606530474bff0b16d858609f7c8505c

    • SHA256

      e3bb7d5e0e74dfac43c272516d78431426f9869912cb426f6db70a156c8512fd

    • SHA512

      c6e1b62fb6067e3beb1f87cec5964c0ddd1e536cbf9b948348921179f9ab4ec35a1c646d6fe048afd08e933da02bb6c563efbae10ebe0ca04cc72d3dc5d909b1

    • SSDEEP

      6144:fZeNLJ49BUMG2TRzEYq0Ql3xf0YnOznSZeQRpxyf+t:kW9B3rl5Ql3xULSFft

    Score
    10/10
    gcleaneronlyloggerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks