General

  • Target

    6f55e35fed0517cdea8c9399175a83bc98b9d8f9a111fa4809f660f7918bfe3f

  • Size

    325KB

  • Sample

    240909-fqegtsshlj

  • MD5

    675c2d62ca97058633911ca9516837e1

  • SHA1

    3b43fa9e75ad10ee0f422624fa3103d3c252f0b0

  • SHA256

    6f55e35fed0517cdea8c9399175a83bc98b9d8f9a111fa4809f660f7918bfe3f

  • SHA512

    62e05b44d6f8e48fbe1af502fe9347b35263383e97978a870d2dfb63d61d9a00dd7c31dd09ffd49f31033c5350af7d6cbbe1a4e6635ea00d50582779bca1adc7

  • SSDEEP

    6144:Ofb1V/daFI6Dqkk9g6V5LL57Qy+FoM+iRSw/Q:6brdaFI6Jk91pL5MZ+iR9/

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      6f55e35fed0517cdea8c9399175a83bc98b9d8f9a111fa4809f660f7918bfe3f

    • Size

      325KB

    • MD5

      675c2d62ca97058633911ca9516837e1

    • SHA1

      3b43fa9e75ad10ee0f422624fa3103d3c252f0b0

    • SHA256

      6f55e35fed0517cdea8c9399175a83bc98b9d8f9a111fa4809f660f7918bfe3f

    • SHA512

      62e05b44d6f8e48fbe1af502fe9347b35263383e97978a870d2dfb63d61d9a00dd7c31dd09ffd49f31033c5350af7d6cbbe1a4e6635ea00d50582779bca1adc7

    • SSDEEP

      6144:Ofb1V/daFI6Dqkk9g6V5LL57Qy+FoM+iRSw/Q:6brdaFI6Jk91pL5MZ+iR9/

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks