General

  • Target

    5aba703ae3636bbd23110d80621643e39f4b924a664f85bd6542f9f10c6b983b

  • Size

    325KB

  • Sample

    240907-s4tj5atamh

  • MD5

    85737d1c7426259423c84f96719e82ea

  • SHA1

    0cc96b89ffc0150d6f28143cac0a1070e7d86e40

  • SHA256

    5aba703ae3636bbd23110d80621643e39f4b924a664f85bd6542f9f10c6b983b

  • SHA512

    5dbeaceb38a1991b539e5c11e31b4fdea806d845466052a0ca2c9de46b2d98af64c80d1fd237218f58770f1b334c09e02dd4a6dc7f4043767911a212d359abcf

  • SSDEEP

    6144:SfH1EM1595tnpAFQoUQzxh/vtuknuIiF/Q:mHh1595VpAWkT1uCuF/

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      5aba703ae3636bbd23110d80621643e39f4b924a664f85bd6542f9f10c6b983b

    • Size

      325KB

    • MD5

      85737d1c7426259423c84f96719e82ea

    • SHA1

      0cc96b89ffc0150d6f28143cac0a1070e7d86e40

    • SHA256

      5aba703ae3636bbd23110d80621643e39f4b924a664f85bd6542f9f10c6b983b

    • SHA512

      5dbeaceb38a1991b539e5c11e31b4fdea806d845466052a0ca2c9de46b2d98af64c80d1fd237218f58770f1b334c09e02dd4a6dc7f4043767911a212d359abcf

    • SSDEEP

      6144:SfH1EM1595tnpAFQoUQzxh/vtuknuIiF/Q:mHh1595VpAWkT1uCuF/

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks