General

  • Target

    04d418f79f96f03e882c0a2cad4be1dd_JaffaCakes118

  • Size

    325KB

  • Sample

    241001-h4xxfaxcmr

  • MD5

    04d418f79f96f03e882c0a2cad4be1dd

  • SHA1

    ffed69e865a8bcff66a12a4529dce91edb9829f9

  • SHA256

    a7790393710532223b7a1ec48034e0e50a72d5cae2b93bdd6197f78b96184ea8

  • SHA512

    28a106d0607cced19445c480af76cdb7f3143d9459e97f760d786af0ea2d6d178efd948f6475815ce2e02a5d812f16dd39abfe028f33226869ccfe5a6f124e9b

  • SSDEEP

    6144:x4lypJoCP1r+pEsOcWV61F4LKU9wZrNVfs8V:xBP1KpTO1V616CN2

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      04d418f79f96f03e882c0a2cad4be1dd_JaffaCakes118

    • Size

      325KB

    • MD5

      04d418f79f96f03e882c0a2cad4be1dd

    • SHA1

      ffed69e865a8bcff66a12a4529dce91edb9829f9

    • SHA256

      a7790393710532223b7a1ec48034e0e50a72d5cae2b93bdd6197f78b96184ea8

    • SHA512

      28a106d0607cced19445c480af76cdb7f3143d9459e97f760d786af0ea2d6d178efd948f6475815ce2e02a5d812f16dd39abfe028f33226869ccfe5a6f124e9b

    • SSDEEP

      6144:x4lypJoCP1r+pEsOcWV61F4LKU9wZrNVfs8V:xBP1KpTO1V616CN2

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks