General

  • Target

    2c2b18b625f46b2c92b1df8c7a0634e5_JaffaCakes118

  • Size

    325KB

  • Sample

    241009-gs192swfnq

  • MD5

    2c2b18b625f46b2c92b1df8c7a0634e5

  • SHA1

    d1a9f577d7808a399e1226fd88984ef4e107ae50

  • SHA256

    3fba70cac321a434f3eb509f38e80919a6e43c86e964737f91ad416bec297933

  • SHA512

    ecc5815b3c3c3d2443f44c55010ccd52a344448188113943e632def78fe40c342a1dac2a897f795131904c04d773fa2e9513336906df645c82668a26b113e27b

  • SSDEEP

    6144:w63+o2J9uflgvvBASV0F3jPZpW+3Ttu+/LKUZrNVfs8V:1+o2PuflYASKFztuIN2

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      2c2b18b625f46b2c92b1df8c7a0634e5_JaffaCakes118

    • Size

      325KB

    • MD5

      2c2b18b625f46b2c92b1df8c7a0634e5

    • SHA1

      d1a9f577d7808a399e1226fd88984ef4e107ae50

    • SHA256

      3fba70cac321a434f3eb509f38e80919a6e43c86e964737f91ad416bec297933

    • SHA512

      ecc5815b3c3c3d2443f44c55010ccd52a344448188113943e632def78fe40c342a1dac2a897f795131904c04d773fa2e9513336906df645c82668a26b113e27b

    • SSDEEP

      6144:w63+o2J9uflgvvBASV0F3jPZpW+3Ttu+/LKUZrNVfs8V:1+o2PuflYASKFztuIN2

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks