General

  • Target

    adc6b0f79706dd9eb904164601e7d7b741c289dac80137c55b41203f07f8041d.exe

  • Size

    388KB

  • Sample

    241123-rtdkgssqap

  • MD5

    b1b0f662604ad80678956c119ab3eb74

  • SHA1

    08cfcb77516e6ba7e03ab99dd2c23f2af7564bc7

  • SHA256

    adc6b0f79706dd9eb904164601e7d7b741c289dac80137c55b41203f07f8041d

  • SHA512

    63940011f68457469ec7b942dd2db2b34c36394aafb4e5df5f48d147efee8a44f7392f4a107364c8c51c9b5254e0c5a6ca31ef7a463f4fba607c79c59b0aa9e2

  • SSDEEP

    6144:2dTfwYDTggRO4bLVyEOkW6igrunVW9mcvPD93S3yxAv77ykGRDDFar:275LVyEG6i5nVW9D3D93S3yxu75GRd6

Malware Config

Extracted

Family

gcleaner

C2

ppp-gl.biz

45.9.20.13

Targets

    • Target

      adc6b0f79706dd9eb904164601e7d7b741c289dac80137c55b41203f07f8041d.exe

    • Size

      388KB

    • MD5

      b1b0f662604ad80678956c119ab3eb74

    • SHA1

      08cfcb77516e6ba7e03ab99dd2c23f2af7564bc7

    • SHA256

      adc6b0f79706dd9eb904164601e7d7b741c289dac80137c55b41203f07f8041d

    • SHA512

      63940011f68457469ec7b942dd2db2b34c36394aafb4e5df5f48d147efee8a44f7392f4a107364c8c51c9b5254e0c5a6ca31ef7a463f4fba607c79c59b0aa9e2

    • SSDEEP

      6144:2dTfwYDTggRO4bLVyEOkW6igrunVW9mcvPD93S3yxAv77ykGRDDFar:275LVyEG6i5nVW9D3D93S3yxu75GRd6

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks