General

  • Target

    a2b8cf09d6dd866faa2ff72c553081ad_JaffaCakes118

  • Size

    264KB

  • Sample

    241126-syhwfatlbm

  • MD5

    a2b8cf09d6dd866faa2ff72c553081ad

  • SHA1

    955afd9dae7c07f72bc9e3394b0e37de41d3aab3

  • SHA256

    53364173f3b4771f13cf0f8c6d4e19717f9097d3680e62a09d69186cb71001c8

  • SHA512

    fdea959e9013a2bad3a70525e7c5bf17b6b42e245044fb39feda72b1e161be119305eecde0d39382e55331ea0bc0fbeb5960b4ec720b7f3cce20674aa667df51

  • SSDEEP

    6144:zILWTvRwx9NuwUobWUPyX6yljLiSrRgDajTwa/RxJg:zI6L6xXRjbWqO6Yje0RPY

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      a2b8cf09d6dd866faa2ff72c553081ad_JaffaCakes118

    • Size

      264KB

    • MD5

      a2b8cf09d6dd866faa2ff72c553081ad

    • SHA1

      955afd9dae7c07f72bc9e3394b0e37de41d3aab3

    • SHA256

      53364173f3b4771f13cf0f8c6d4e19717f9097d3680e62a09d69186cb71001c8

    • SHA512

      fdea959e9013a2bad3a70525e7c5bf17b6b42e245044fb39feda72b1e161be119305eecde0d39382e55331ea0bc0fbeb5960b4ec720b7f3cce20674aa667df51

    • SSDEEP

      6144:zILWTvRwx9NuwUobWUPyX6yljLiSrRgDajTwa/RxJg:zI6L6xXRjbWqO6Yje0RPY

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks