Overview

overview

10

Static

static

3

a880920e6a...18.exe

windows7-x64

10

a880920e6a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a880920e6a94db56230f0126320a8f80_JaffaCakes118

  • Size

    365KB

  • Sample

    241127-svedvavqgp

  • MD5

    a880920e6a94db56230f0126320a8f80

  • SHA1

    5a671054f28d7fc239ae9a06b5ebb197efa35710

  • SHA256

    6656afb1a5661a3ffca441f82e358ef88332a68418373c20be3dc7cdb681976f

  • SHA512

    00d2657cf3d03c91be0d50d056c3543851e3279fd44b4c56f7c5e1e9431fc9abed1c6ed39b1a80854b20f9af083b34ea667fc2e944d2be583e31343663b48a9c

  • SSDEEP

    6144:z8bmcN/mZ6pF8JgGJqAmcgpXmKP6PbYPXzf3gFU31KvmwRJ7ISYY21gSfwCj:uj00HygGJqAkXmKP6PbYLfHgvmwRZpUh

Score
10/10
gcleaneronlyloggerdiscoveryloader

Malware Config

Targets

    • Target

      a880920e6a94db56230f0126320a8f80_JaffaCakes118

    • Size

      365KB

    • MD5

      a880920e6a94db56230f0126320a8f80

    • SHA1

      5a671054f28d7fc239ae9a06b5ebb197efa35710

    • SHA256

      6656afb1a5661a3ffca441f82e358ef88332a68418373c20be3dc7cdb681976f

    • SHA512

      00d2657cf3d03c91be0d50d056c3543851e3279fd44b4c56f7c5e1e9431fc9abed1c6ed39b1a80854b20f9af083b34ea667fc2e944d2be583e31343663b48a9c

    • SSDEEP

      6144:z8bmcN/mZ6pF8JgGJqAmcgpXmKP6PbYPXzf3gFU31KvmwRJ7ISYY21gSfwCj:uj00HygGJqAkXmKP6PbYLfHgvmwRZpUh

    Score
    10/10
    gcleaneronlyloggerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • Onlylogger family

      onlylogger

    • OnlyLogger payload

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks