General

  • Target

    e27f354691dca31faffbc035734347361f8b1b9e3d2c6e25e3fd856529d840c6

  • Size

    422KB

  • Sample

    240912-ab6pwa1ard

  • MD5

    46e8b4c1c4e285139f664c679e0e9164

  • SHA1

    dd73a911c541043542d527f7f4e73d6c3a119d90

  • SHA256

    e27f354691dca31faffbc035734347361f8b1b9e3d2c6e25e3fd856529d840c6

  • SHA512

    a150957b0f97ac2c7f096c06aa946b9e396acaf7413dbb6dbe10920eda17321916242deb074607643bc68b1264791eac96cc461d6a07de7c3277b4ad4ea4922f

  • SSDEEP

    6144:qPG5SX+c9kcgeDDOruVqtNNGyaWC5bnqgVa1uQHP6B:D5qkmSruU/NuWaqgIPHi

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      e27f354691dca31faffbc035734347361f8b1b9e3d2c6e25e3fd856529d840c6

    • Size

      422KB

    • MD5

      46e8b4c1c4e285139f664c679e0e9164

    • SHA1

      dd73a911c541043542d527f7f4e73d6c3a119d90

    • SHA256

      e27f354691dca31faffbc035734347361f8b1b9e3d2c6e25e3fd856529d840c6

    • SHA512

      a150957b0f97ac2c7f096c06aa946b9e396acaf7413dbb6dbe10920eda17321916242deb074607643bc68b1264791eac96cc461d6a07de7c3277b4ad4ea4922f

    • SSDEEP

      6144:qPG5SX+c9kcgeDDOruVqtNNGyaWC5bnqgVa1uQHP6B:D5qkmSruU/NuWaqgIPHi

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks