Extracted

• • Target

    6402e1483733ff33c0e0b7e8856d3d50_JaffaCakes118

  • Size

    406KB

  • MD5

    6402e1483733ff33c0e0b7e8856d3d50

  • SHA1

    06eb7e31bae25f0247f0c3b9d4e3cd8fbc529d9b

  • SHA256

    4e01866db5ec52866e21eac49c4135d62fe712d8b64cee07bd755a2accf0340b

  • SHA512

    9de738391757853346d0b709ab7670b2bccaaef59ee91135bc5430145ac79bbae6ad657a01e915c4ddca65c718fc1dd214afc7346290f2f8478ff3bf2d3d444a

  • SSDEEP

    6144:Qgb8zQt6txzTlV+/6I79o5kXlAnRxMSCZ0s6VqEs5NJUwxC8YaDl2HUFli3kLmb:yQtyViSI72El+Rx5DsVhxfuui3kLmb

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery
  behavioral1behavioral2