General

  • Target

    135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

  • Size

    382KB

  • Sample

    241004-pphbrstfqm

  • MD5

    135e3b953016398bcd507f952cb8d8a8

  • SHA1

    7ccfae43db1dbae65a20503b11d5499903b728dc

  • SHA256

    6acf924acc2978d82ac6b7adc976b07158cc09b7d64676175a9a1e61e6312c2c

  • SHA512

    91d3bd47dcaabb3699fc5dca9eeabd8e530faabd30245a69a332186bbb1280341113c655916a2757ce49a6e35a4d25b5918503a58735c12debe2b1493614aaf9

  • SSDEEP

    6144:z1iODljRPqur0A1W54NkZGiPlx8YhLj6VU7cEhCmLGdk+QttYtoF:EO5jRPqurp1WLZGqZjQEs4fqQ

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

    • Size

      382KB

    • MD5

      135e3b953016398bcd507f952cb8d8a8

    • SHA1

      7ccfae43db1dbae65a20503b11d5499903b728dc

    • SHA256

      6acf924acc2978d82ac6b7adc976b07158cc09b7d64676175a9a1e61e6312c2c

    • SHA512

      91d3bd47dcaabb3699fc5dca9eeabd8e530faabd30245a69a332186bbb1280341113c655916a2757ce49a6e35a4d25b5918503a58735c12debe2b1493614aaf9

    • SSDEEP

      6144:z1iODljRPqur0A1W54NkZGiPlx8YhLj6VU7cEhCmLGdk+QttYtoF:EO5jRPqurp1WLZGqZjQEs4fqQ

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks