General

  • Target

    d176ec3951ff55bd7bf3b07d09227fabd658351f8d77cab164c52c5d4ea96e1d

  • Size

    272KB

  • Sample

    240902-m45phazbre

  • MD5

    95b1184cab998e05d5e899f7e3ad1c97

  • SHA1

    a2ff64bcd57c703dea8d5f9be4f053c98b9e2a39

  • SHA256

    d176ec3951ff55bd7bf3b07d09227fabd658351f8d77cab164c52c5d4ea96e1d

  • SHA512

    47c52c50057f6f7f5784be6274c3c4fe6028495c75d9efc0a3926fe024f079f43dd301ad3ca206a8472ade3624b677792e7d35acad13cb86584e86526482203f

  • SSDEEP

    6144:oBBoBMvaF1X2TavDElrUzo3KdACYctRgqC6:oGMvaCavDEizo6Sl6

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      d176ec3951ff55bd7bf3b07d09227fabd658351f8d77cab164c52c5d4ea96e1d

    • Size

      272KB

    • MD5

      95b1184cab998e05d5e899f7e3ad1c97

    • SHA1

      a2ff64bcd57c703dea8d5f9be4f053c98b9e2a39

    • SHA256

      d176ec3951ff55bd7bf3b07d09227fabd658351f8d77cab164c52c5d4ea96e1d

    • SHA512

      47c52c50057f6f7f5784be6274c3c4fe6028495c75d9efc0a3926fe024f079f43dd301ad3ca206a8472ade3624b677792e7d35acad13cb86584e86526482203f

    • SSDEEP

      6144:oBBoBMvaF1X2TavDElrUzo3KdACYctRgqC6:oGMvaCavDEizo6Sl6

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks