General

  • Target

    5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

  • Size

    389KB

  • Sample

    241121-x2x7razlam

  • MD5

    abe088e1e401df91c6729d1e4e3d44da

  • SHA1

    b0fb9e1bd6f3761b2bd639ffe22625d394d93423

  • SHA256

    5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

  • SHA512

    a2285691fab964ce40d62f48f75a57943fd83aa6ac74ee76b64f7981302cc74f565cc37a5f88474bc6981e32b031f038d30fff4ccca050f878beb59dde976f3e

  • SSDEEP

    12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn/:qgFjRUHHagC9PDK

Malware Config

Extracted

Family

gcleaner

C2

gcl-gb.biz

45.9.20.13

Targets

    • Target

      5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

    • Size

      389KB

    • MD5

      abe088e1e401df91c6729d1e4e3d44da

    • SHA1

      b0fb9e1bd6f3761b2bd639ffe22625d394d93423

    • SHA256

      5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

    • SHA512

      a2285691fab964ce40d62f48f75a57943fd83aa6ac74ee76b64f7981302cc74f565cc37a5f88474bc6981e32b031f038d30fff4ccca050f878beb59dde976f3e

    • SSDEEP

      12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn/:qgFjRUHHagC9PDK

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks