Extracted

• • Target

    590f546423761972e4441b07762457c3_JaffaCakes118

  • Size

    408KB

  • MD5

    590f546423761972e4441b07762457c3

  • SHA1

    190ac7ce94a98fd213b9039db05f1f24fa36dceb

  • SHA256

    794d2eb60364e0f5ddc9e557cf3e33b67666ed688580c15bd858a27871b184aa

  • SHA512

    3a5e16946e79246ba5973757066c392384dbdcd881f4e68aa881d08e1e6cefed4a77dd87a21e910600e6db3e01b4a65e3cf88b3407b4bb859794eef13f356789

  • SSDEEP

    6144:Ka9zHt2qx/TlV+DwMZ0k3cGLdq+cCZ0iRvQMksFiEbXj1/LYQSwfiMcALqTWbg:bHth5iDwMZNccdqwtFfNL8scALqab

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery
  behavioral1behavioral2