General

  • Target

    a1962b79fdab22f9b00bc2a02b7a8d2c0f233d40381001910af2b645ce44729f.exe

  • Size

    309KB

  • Sample

    241124-d4hqasskc1

  • MD5

    50ab8d818423a22ef063223c0afb109e

  • SHA1

    e8c6e7bae15d67f7d83023126a22979bff94efe2

  • SHA256

    a1962b79fdab22f9b00bc2a02b7a8d2c0f233d40381001910af2b645ce44729f

  • SHA512

    527388f2553a26a5ac35dc3f799d95da08f9993088fd4860d8c4861825b346179def388cdae84120fff878283b06dc488463569c91af00207434ea421385a931

  • SSDEEP

    6144:Za30xb98+cMz7h9QtI6xDISpTrDC8dWZtjeJIADG8elj:Zi0xR8+PDCI8PgjKxD4

Malware Config

Extracted

Family

gcleaner

C2

gcl-gb.biz

45.9.20.13

Targets

    • Target

      a1962b79fdab22f9b00bc2a02b7a8d2c0f233d40381001910af2b645ce44729f.exe

    • Size

      309KB

    • MD5

      50ab8d818423a22ef063223c0afb109e

    • SHA1

      e8c6e7bae15d67f7d83023126a22979bff94efe2

    • SHA256

      a1962b79fdab22f9b00bc2a02b7a8d2c0f233d40381001910af2b645ce44729f

    • SHA512

      527388f2553a26a5ac35dc3f799d95da08f9993088fd4860d8c4861825b346179def388cdae84120fff878283b06dc488463569c91af00207434ea421385a931

    • SSDEEP

      6144:Za30xb98+cMz7h9QtI6xDISpTrDC8dWZtjeJIADG8elj:Zi0xR8+PDCI8PgjKxD4

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks