General

  • Target

    7ae29173f6460d9d9a9613ef289b7c5f88ad21854f456e7fe23ac46530fe733c

  • Size

    415KB

  • Sample

    240903-ltql6atcjm

  • MD5

    db88b5162c2dc02d21b80ab0458f4257

  • SHA1

    e740e44e3bf13b8460c1ecc044493573aa7ecab4

  • SHA256

    7ae29173f6460d9d9a9613ef289b7c5f88ad21854f456e7fe23ac46530fe733c

  • SHA512

    7aedd38b870c47df48f92909e5e7f9789323ac0d405d4039948c3ccd037aac8aa651d7339832bdd6fa3b15e98af251f79039419922332516953ddc5cb08651d8

  • SSDEEP

    6144:vEngbbiZvD7FgW5ohb/ZX9ngtb4u/0OM9QaW0B2RJmjZFJe:vaabiZfmWk/ZX9ngtb4sTa/YRJajJ

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      7ae29173f6460d9d9a9613ef289b7c5f88ad21854f456e7fe23ac46530fe733c

    • Size

      415KB

    • MD5

      db88b5162c2dc02d21b80ab0458f4257

    • SHA1

      e740e44e3bf13b8460c1ecc044493573aa7ecab4

    • SHA256

      7ae29173f6460d9d9a9613ef289b7c5f88ad21854f456e7fe23ac46530fe733c

    • SHA512

      7aedd38b870c47df48f92909e5e7f9789323ac0d405d4039948c3ccd037aac8aa651d7339832bdd6fa3b15e98af251f79039419922332516953ddc5cb08651d8

    • SSDEEP

      6144:vEngbbiZvD7FgW5ohb/ZX9ngtb4u/0OM9QaW0B2RJmjZFJe:vaabiZfmWk/ZX9ngtb4sTa/YRJajJ

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks