Overview

overview

10

Static

static

3

ab8781ed00...18.exe

windows7-x64

10

ab8781ed00...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab8781ed006eff23e2f4391e9d87d33c_JaffaCakes118

  • Size

    356KB

  • Sample

    241128-jg629szqht

  • MD5

    ab8781ed006eff23e2f4391e9d87d33c

  • SHA1

    d557dc317e733bcc896a08158c4bc978b524c689

  • SHA256

    6543fb158c4d0ace63d292da67d86920914c57280adeb9726694cb7805f7466b

  • SHA512

    73c8f4b37d076e2d8606375d3bbc821ccaab5b82ba68e8b2aad48881dcb893ce218334cdaa026acc426080599794240157a6e56ceaa2979276e8e983dfc61a69

  • SSDEEP

    6144:KPQzXx/rNASsV56sMrFQPUuqwogELhSblM0zPJFw1NDDPBRe5EMj:9zXpqSsV5crFQP+nVl0Pa1FDPBRkJj

Score
10/10
gcleaneronlyloggerdiscoveryloader

Malware Config

Targets

    • Target

      ab8781ed006eff23e2f4391e9d87d33c_JaffaCakes118

    • Size

      356KB

    • MD5

      ab8781ed006eff23e2f4391e9d87d33c

    • SHA1

      d557dc317e733bcc896a08158c4bc978b524c689

    • SHA256

      6543fb158c4d0ace63d292da67d86920914c57280adeb9726694cb7805f7466b

    • SHA512

      73c8f4b37d076e2d8606375d3bbc821ccaab5b82ba68e8b2aad48881dcb893ce218334cdaa026acc426080599794240157a6e56ceaa2979276e8e983dfc61a69

    • SSDEEP

      6144:KPQzXx/rNASsV56sMrFQPUuqwogELhSblM0zPJFw1NDDPBRe5EMj:9zXpqSsV5crFQP+nVl0Pa1FDPBRkJj

    Score
    10/10
    gcleaneronlyloggerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • Onlylogger family

      onlylogger

    • OnlyLogger payload

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks