General

  • Target

    5215cf91873d90f02e10d9074348171a4ac61f9d8f4c337e147e545460bfdb84

  • Size

    422KB

  • Sample

    240911-w2w41svhpp

  • MD5

    d6f97c1c4452a24fd425f9c5c8b73225

  • SHA1

    9d0947e77103f475d39530aa7fb3452cf6afff55

  • SHA256

    5215cf91873d90f02e10d9074348171a4ac61f9d8f4c337e147e545460bfdb84

  • SHA512

    8890b1c585843b7e2ae91db351c8338d10ac288db625b8eb8b194b8549e6c34875467e4805321eddebf1221fed3070159aa4bc1e305b0f9b5de336720e399d7c

  • SSDEEP

    6144:FPnPSXWpS+5zXNqmaujcDOxrVHLvDwAb+/BpfEhUHP6B:NPe+5zXx06rRsAb+/HXHi

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      5215cf91873d90f02e10d9074348171a4ac61f9d8f4c337e147e545460bfdb84

    • Size

      422KB

    • MD5

      d6f97c1c4452a24fd425f9c5c8b73225

    • SHA1

      9d0947e77103f475d39530aa7fb3452cf6afff55

    • SHA256

      5215cf91873d90f02e10d9074348171a4ac61f9d8f4c337e147e545460bfdb84

    • SHA512

      8890b1c585843b7e2ae91db351c8338d10ac288db625b8eb8b194b8549e6c34875467e4805321eddebf1221fed3070159aa4bc1e305b0f9b5de336720e399d7c

    • SSDEEP

      6144:FPnPSXWpS+5zXNqmaujcDOxrVHLvDwAb+/BpfEhUHP6B:NPe+5zXx06rRsAb+/HXHi

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks