General

  • Target

    9cf5b9e7082aeb36e7961916eae05c28_JaffaCakes118

  • Size

    304KB

  • Sample

    241125-v9pt8sykex

  • MD5

    9cf5b9e7082aeb36e7961916eae05c28

  • SHA1

    a0a45cf5003aef11954ac3e9dff297a9ef8a37b6

  • SHA256

    a90bc226fcaf18a89bad9b0a1a57085ecd055b726b67e3a3964d7da03d244007

  • SHA512

    b71d23e10f26965f835480ee794a7b5021fd385af1b553b08e0e911ef53008cfffe86ebdd5a0f953c04a7b76e7ebad50e866a2286627a254568e49a0bca17431

  • SSDEEP

    6144:iY70C7Tu+VGQzSaUZdDnQputx/DFO6QUlxldvM8WI:30C7S+VGQzSddDnQ+dDBxvMt

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      9cf5b9e7082aeb36e7961916eae05c28_JaffaCakes118

    • Size

      304KB

    • MD5

      9cf5b9e7082aeb36e7961916eae05c28

    • SHA1

      a0a45cf5003aef11954ac3e9dff297a9ef8a37b6

    • SHA256

      a90bc226fcaf18a89bad9b0a1a57085ecd055b726b67e3a3964d7da03d244007

    • SHA512

      b71d23e10f26965f835480ee794a7b5021fd385af1b553b08e0e911ef53008cfffe86ebdd5a0f953c04a7b76e7ebad50e866a2286627a254568e49a0bca17431

    • SSDEEP

      6144:iY70C7Tu+VGQzSaUZdDnQputx/DFO6QUlxldvM8WI:30C7S+VGQzSddDnQ+dDBxvMt

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks