General

  • Target

    14fc30b136fba0eccf1e45c1ff7ee696a01441c74c2068e322f11bae7a8840e1

  • Size

    396KB

  • Sample

    240830-pfyx6atcne

  • MD5

    24e74d47ca49024c5ed05f4658524cf3

  • SHA1

    7575ee755c5c5a8c8890ee1853ab3fc03225cb92

  • SHA256

    14fc30b136fba0eccf1e45c1ff7ee696a01441c74c2068e322f11bae7a8840e1

  • SHA512

    19da475686c1e7c1685e14e5d1181b87a29e8dfa553c90fad4cf4ba8d42a8d13b5e19fb228900637e1899d8295e2f4b2e1096e837a010166de7f3fc624cff4e7

  • SSDEEP

    6144:W1SzN8f1qWfBOmP9lh3FCDZ1JeAjKe/JNOCliDZ:a2N8NqUOmP9lh8d1Jeqz/+Mo

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      14fc30b136fba0eccf1e45c1ff7ee696a01441c74c2068e322f11bae7a8840e1

    • Size

      396KB

    • MD5

      24e74d47ca49024c5ed05f4658524cf3

    • SHA1

      7575ee755c5c5a8c8890ee1853ab3fc03225cb92

    • SHA256

      14fc30b136fba0eccf1e45c1ff7ee696a01441c74c2068e322f11bae7a8840e1

    • SHA512

      19da475686c1e7c1685e14e5d1181b87a29e8dfa553c90fad4cf4ba8d42a8d13b5e19fb228900637e1899d8295e2f4b2e1096e837a010166de7f3fc624cff4e7

    • SSDEEP

      6144:W1SzN8f1qWfBOmP9lh3FCDZ1JeAjKe/JNOCliDZ:a2N8NqUOmP9lh8d1Jeqz/+Mo

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks