General

  • Target

    4e75f8712ee2f529c1e4d034662a86ad352a76e851996f5cf67e58abd949cc50

  • Size

    403KB

  • Sample

    240831-tke33asgpp

  • MD5

    2bec28292653e2f9bec82bf0ecb18f23

  • SHA1

    44a3cde4749d52fdee48879d88594446ae08f693

  • SHA256

    4e75f8712ee2f529c1e4d034662a86ad352a76e851996f5cf67e58abd949cc50

  • SHA512

    10b91a142408b9dafe1b897e896f3ef1cb58b6c90b41e8fbdf7e93884045afbebd42d230966a67cb55522ac203e5c07a0b2486aec4d7ce09a66b0b70dd8b8e08

  • SSDEEP

    3072:zMLoO5tBeuUJsIHRil98r43BJ87CM2h/OQIhn4kJmotUU6W/c1rpQKwFnmAdvvjG:wjLBmLHRil988Botr5Jztf610rvjwq

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      4e75f8712ee2f529c1e4d034662a86ad352a76e851996f5cf67e58abd949cc50

    • Size

      403KB

    • MD5

      2bec28292653e2f9bec82bf0ecb18f23

    • SHA1

      44a3cde4749d52fdee48879d88594446ae08f693

    • SHA256

      4e75f8712ee2f529c1e4d034662a86ad352a76e851996f5cf67e58abd949cc50

    • SHA512

      10b91a142408b9dafe1b897e896f3ef1cb58b6c90b41e8fbdf7e93884045afbebd42d230966a67cb55522ac203e5c07a0b2486aec4d7ce09a66b0b70dd8b8e08

    • SSDEEP

      3072:zMLoO5tBeuUJsIHRil98r43BJ87CM2h/OQIhn4kJmotUU6W/c1rpQKwFnmAdvvjG:wjLBmLHRil988Botr5Jztf610rvjwq

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks