General

  • Target

    84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

  • Size

    1.9MB

  • Sample

    241010-zx7xhawgrg

  • MD5

    db65c66bf6f7821600068a973f2cab57

  • SHA1

    6a77e24a87bae4ce67b69bbe9da6fdeda2afc33d

  • SHA256

    84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

  • SHA512

    88893d2ff38661618893b75ed319d8d530c9bf0a225b665068addc71ecfd62b546cb52aa19386d64e345a678578b98e85d31dce27a8e54e946f2073799c7b92d

  • SSDEEP

    24576:A/sT4C+MSIpr42JE+wF7nwm+6IMoqHZU9Oap/HxUOt2PWeJLYqqFR:A/M45MgW6I6HUpJUqFR

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

37.139.129.24

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

    • Size

      1.9MB

    • MD5

      db65c66bf6f7821600068a973f2cab57

    • SHA1

      6a77e24a87bae4ce67b69bbe9da6fdeda2afc33d

    • SHA256

      84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

    • SHA512

      88893d2ff38661618893b75ed319d8d530c9bf0a225b665068addc71ecfd62b546cb52aa19386d64e345a678578b98e85d31dce27a8e54e946f2073799c7b92d

    • SSDEEP

      24576:A/sT4C+MSIpr42JE+wF7nwm+6IMoqHZU9Oap/HxUOt2PWeJLYqqFR:A/M45MgW6I6HUpJUqFR

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

MITRE ATT&CK Enterprise v15

Tasks