General

  • Target

    e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3

  • Size

    302KB

  • Sample

    240926-28586atalj

  • MD5

    1493d42494ac3ede934f707489064704

  • SHA1

    928ad3af445c99e8d4cbddb0f3bcac9cd9934ac4

  • SHA256

    e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3

  • SHA512

    3f526b0ba2118fe333fbae26b252fce3dd601d19d38fd8e2cc4b75e2c0d396cab26916bd7fe4e66cf5b7f4cb4c3243006f91e9882674d5d82242c2d39b175002

  • SSDEEP

    3072:kLihaKzMrehykeA1yfCxvO4vIesYCbCOTMxLe5RvXVYz3M5LSxZ2Hzaej:kLioAMrehyk3yalJIDdCZWvFYc5+i

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

Targets

    • Target

      e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3

    • Size

      302KB

    • MD5

      1493d42494ac3ede934f707489064704

    • SHA1

      928ad3af445c99e8d4cbddb0f3bcac9cd9934ac4

    • SHA256

      e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3

    • SHA512

      3f526b0ba2118fe333fbae26b252fce3dd601d19d38fd8e2cc4b75e2c0d396cab26916bd7fe4e66cf5b7f4cb4c3243006f91e9882674d5d82242c2d39b175002

    • SSDEEP

      3072:kLihaKzMrehykeA1yfCxvO4vIesYCbCOTMxLe5RvXVYz3M5LSxZ2Hzaej:kLioAMrehyk3yalJIDdCZWvFYc5+i

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks