Overview

overview

10

Static

static

3

d26abdc073...f5.exe

windows7-x64

10

d26abdc073...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d26abdc0730520eed70527225776aff8b03c6af1cf87f7045a5110fbf7abbef5

  • Size

    1.8MB

  • Sample

    241127-1y2mjsymgl

  • MD5

    0fb884732a9352f9e999b9467d34443d

  • SHA1

    1a4ca64b9ec479dc92f6f2621a3c9fb971c9a1bf

  • SHA256

    d26abdc0730520eed70527225776aff8b03c6af1cf87f7045a5110fbf7abbef5

  • SHA512

    9119fd58ba93cd49e6877fb901d6a44589471aa911c02559bf0805626c6c8e408771d89bb81ad8d691c315bc1868bf6dc25bb9bbe1be160313637d00567ccfb9

  • SSDEEP

    24576:KEhVeTdYFbj5mO29H31SZfZZT2547GBfW4Og:KEwdMbj5mO2t3QZK3VO

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

85.31.45.39

85.31.45.250

85.31.45.251

85.31.45.88
Attributes
  • url_path

    /b.php

    /d.php

    /d.php

Targets

    • Target

      d26abdc0730520eed70527225776aff8b03c6af1cf87f7045a5110fbf7abbef5

    • Size

      1.8MB

    • MD5

      0fb884732a9352f9e999b9467d34443d

    • SHA1

      1a4ca64b9ec479dc92f6f2621a3c9fb971c9a1bf

    • SHA256

      d26abdc0730520eed70527225776aff8b03c6af1cf87f7045a5110fbf7abbef5

    • SHA512

      9119fd58ba93cd49e6877fb901d6a44589471aa911c02559bf0805626c6c8e408771d89bb81ad8d691c315bc1868bf6dc25bb9bbe1be160313637d00567ccfb9

    • SSDEEP

      24576:KEhVeTdYFbj5mO29H31SZfZZT2547GBfW4Og:KEwdMbj5mO2t3QZK3VO

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks