General

  • Target

    b7397159694117ebb0149f905dad292d9ad5106b358fce9c97bc187c158547a4

  • Size

    400KB

  • Sample

    240905-2qy25asfjr

  • MD5

    7bdac87c21551a23a0c0438444bb00d7

  • SHA1

    36965e8fd4e35750017c4d2224036e00bde43af4

  • SHA256

    b7397159694117ebb0149f905dad292d9ad5106b358fce9c97bc187c158547a4

  • SHA512

    c657b9fc7dfa3ae046a571e6da6b1c2cacddc7fbf16f535773de3202e9073a9629eacd03cad9d0ee9310fbc89041d4e5cc56a411ff5f74e08df9bfa370497c4a

  • SSDEEP

    12288:cizo3PfdpfFtsLJolaoS6zacTkpCENtI:cOoffFtwoBTei

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      b7397159694117ebb0149f905dad292d9ad5106b358fce9c97bc187c158547a4

    • Size

      400KB

    • MD5

      7bdac87c21551a23a0c0438444bb00d7

    • SHA1

      36965e8fd4e35750017c4d2224036e00bde43af4

    • SHA256

      b7397159694117ebb0149f905dad292d9ad5106b358fce9c97bc187c158547a4

    • SHA512

      c657b9fc7dfa3ae046a571e6da6b1c2cacddc7fbf16f535773de3202e9073a9629eacd03cad9d0ee9310fbc89041d4e5cc56a411ff5f74e08df9bfa370497c4a

    • SSDEEP

      12288:cizo3PfdpfFtsLJolaoS6zacTkpCENtI:cOoffFtwoBTei

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks