General

  • Target

    4c91b355c0d02ffdce4751584d0a4228e51a579273e2de81f2531a6e1b8d53aa

  • Size

    253KB

  • Sample

    241121-x1kj9szkgn

  • MD5

    a12ac26a69d523ba17cbf989cefd2480

  • SHA1

    141e7c85a00cb5b2439f051d6e6b9260b5003743

  • SHA256

    4c91b355c0d02ffdce4751584d0a4228e51a579273e2de81f2531a6e1b8d53aa

  • SHA512

    6b9f5569c97fb9ab4e9af5217613b4d73252a517d275b0cbc1718a3b98d14a59b943e2443cf4bd53bd11727db286af86a382bddea34ac5c63c545d6b99717bc1

  • SSDEEP

    6144:HL9OPaZNgaeZ1l+M3U3OlMavK0h06bItP:HxOp1lLGOaaSn6b

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Targets

    • Target

      4c91b355c0d02ffdce4751584d0a4228e51a579273e2de81f2531a6e1b8d53aa

    • Size

      253KB

    • MD5

      a12ac26a69d523ba17cbf989cefd2480

    • SHA1

      141e7c85a00cb5b2439f051d6e6b9260b5003743

    • SHA256

      4c91b355c0d02ffdce4751584d0a4228e51a579273e2de81f2531a6e1b8d53aa

    • SHA512

      6b9f5569c97fb9ab4e9af5217613b4d73252a517d275b0cbc1718a3b98d14a59b943e2443cf4bd53bd11727db286af86a382bddea34ac5c63c545d6b99717bc1

    • SSDEEP

      6144:HL9OPaZNgaeZ1l+M3U3OlMavK0h06bItP:HxOp1lLGOaaSn6b

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks