General

  • Target

    08b0c8a78a4e6c9d9bfc0f32bb9c5304_JaffaCakes118

  • Size

    294KB

  • Sample

    241002-d68dqsygmb

  • MD5

    08b0c8a78a4e6c9d9bfc0f32bb9c5304

  • SHA1

    ac48d930b7a4474d94aa32ec1866c34849f05335

  • SHA256

    d9b6ded9a373ec4acf4b426c4ad5fd318b6a3f8077429e9fe5b27bd66d6b5be6

  • SHA512

    19da1490419f754fc4afe63b7ad985e5fd9563d4b8dc1982d4a1d61feaa7534482ffcb8e73d9bee24095d1ea7248cfb36ea425653cea2a9cf0d1d87656ec53c2

  • SSDEEP

    3072:rqVRhqlyewShRzCBjpWfB7v+6Hcng2EEBviYSyyEmCL5dWc7YWnLH5SnCNeoBNTz:cbfShRWBjiB7WbdEEBHPWPW75SCIwY8

Malware Config

Extracted

Family

gcleaner

C2

ggc-partners.in

Targets

    • Target

      08b0c8a78a4e6c9d9bfc0f32bb9c5304_JaffaCakes118

    • Size

      294KB

    • MD5

      08b0c8a78a4e6c9d9bfc0f32bb9c5304

    • SHA1

      ac48d930b7a4474d94aa32ec1866c34849f05335

    • SHA256

      d9b6ded9a373ec4acf4b426c4ad5fd318b6a3f8077429e9fe5b27bd66d6b5be6

    • SHA512

      19da1490419f754fc4afe63b7ad985e5fd9563d4b8dc1982d4a1d61feaa7534482ffcb8e73d9bee24095d1ea7248cfb36ea425653cea2a9cf0d1d87656ec53c2

    • SSDEEP

      3072:rqVRhqlyewShRzCBjpWfB7v+6Hcng2EEBviYSyyEmCL5dWc7YWnLH5SnCNeoBNTz:cbfShRWBjiB7WbdEEBHPWPW75SCIwY8

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks