General

  • Target

    5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

  • Size

    295KB

  • Sample

    240912-2h7pasyelr

  • MD5

    6e3716c0a67dc70a318593daf25042a5

  • SHA1

    19f7e468a80a36995a71199edc7307b2dfced214

  • SHA256

    5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

  • SHA512

    0ec466775d1f47425a12849aa803595fa196cf7c29e0a4a9171991f87d3a040d83bf623709dc92de72b2d7acdc6ddc91567555dc820b6b74e3c85bf2d647c2e4

  • SSDEEP

    6144:Q0DNVFqzDiBBvQk1fyIUhMUvhruX/76L/M40Vdh1aQ:QENVI3iBBvxfyIUWs+76QVdz

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

    • Size

      295KB

    • MD5

      6e3716c0a67dc70a318593daf25042a5

    • SHA1

      19f7e468a80a36995a71199edc7307b2dfced214

    • SHA256

      5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

    • SHA512

      0ec466775d1f47425a12849aa803595fa196cf7c29e0a4a9171991f87d3a040d83bf623709dc92de72b2d7acdc6ddc91567555dc820b6b74e3c85bf2d647c2e4

    • SSDEEP

      6144:Q0DNVFqzDiBBvQk1fyIUhMUvhruX/76L/M40Vdh1aQ:QENVI3iBBvxfyIUWs+76QVdz

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks