General

  • Target

    99a78d0fa03ff7a93ac2a006c6c3baebbbc431d0846e24072ed309761a0d4f15.exe

  • Size

    295KB

  • Sample

    240831-b3v8wsyflq

  • MD5

    7ef50c41a34c273bb1d3bf1dc24171e9

  • SHA1

    a8dd87683e33014f2c2b4b1c05a7666af7d84c87

  • SHA256

    99a78d0fa03ff7a93ac2a006c6c3baebbbc431d0846e24072ed309761a0d4f15

  • SHA512

    86a8b671fbe91594e87baf31df187e8e8bb4ac2e05cf478f567ddb2cc87b033d56d29abb9a492f5d533962d3de13e4775bac8ee17fb7ceffa0eef06c566d34b4

  • SSDEEP

    6144:plLre6o4BjFptWDDWZ9eGQ0KBbhzvN3RnL:LeMj7eD0EGOzRh

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

5.42.65.64

Targets

    • Target

      99a78d0fa03ff7a93ac2a006c6c3baebbbc431d0846e24072ed309761a0d4f15.exe

    • Size

      295KB

    • MD5

      7ef50c41a34c273bb1d3bf1dc24171e9

    • SHA1

      a8dd87683e33014f2c2b4b1c05a7666af7d84c87

    • SHA256

      99a78d0fa03ff7a93ac2a006c6c3baebbbc431d0846e24072ed309761a0d4f15

    • SHA512

      86a8b671fbe91594e87baf31df187e8e8bb4ac2e05cf478f567ddb2cc87b033d56d29abb9a492f5d533962d3de13e4775bac8ee17fb7ceffa0eef06c566d34b4

    • SSDEEP

      6144:plLre6o4BjFptWDDWZ9eGQ0KBbhzvN3RnL:LeMj7eD0EGOzRh

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

MITRE ATT&CK Enterprise v15

Tasks