General

  • Target

    82c8077fffc1dae58cc700542bd40e71a69bacff93f6d85c65eb583a6e42bda9

  • Size

    295KB

  • Sample

    240908-nwptrawgkd

  • MD5

    8aa7782a85c4d712bb398c37406c7b1a

  • SHA1

    d8ae96b16609c4292b6f86de24a67bd1fb062fa2

  • SHA256

    82c8077fffc1dae58cc700542bd40e71a69bacff93f6d85c65eb583a6e42bda9

  • SHA512

    417be55b827fccfe81a4edeef6f590cf668184cd54267a0a903b9660d37343d7491b02de4fe7887c0705341209605d12c4fcb96d1ed56d9549ebfd945f6da28c

  • SSDEEP

    6144:q/0GfXaB6Mn32ftAjf0zGt5I3HXeN0dkwpcpuQTdJlXndB1y:q5Xk6Mn3oCbrj5aqphdJlNBk

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      82c8077fffc1dae58cc700542bd40e71a69bacff93f6d85c65eb583a6e42bda9

    • Size

      295KB

    • MD5

      8aa7782a85c4d712bb398c37406c7b1a

    • SHA1

      d8ae96b16609c4292b6f86de24a67bd1fb062fa2

    • SHA256

      82c8077fffc1dae58cc700542bd40e71a69bacff93f6d85c65eb583a6e42bda9

    • SHA512

      417be55b827fccfe81a4edeef6f590cf668184cd54267a0a903b9660d37343d7491b02de4fe7887c0705341209605d12c4fcb96d1ed56d9549ebfd945f6da28c

    • SSDEEP

      6144:q/0GfXaB6Mn32ftAjf0zGt5I3HXeN0dkwpcpuQTdJlXndB1y:q5Xk6Mn3oCbrj5aqphdJlNBk

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks