General

  • Target

    aebf139b7872db35a814631c6edd15ad_JaffaCakes118

  • Size

    251KB

  • Sample

    241129-ehmmsszkgl

  • MD5

    aebf139b7872db35a814631c6edd15ad

  • SHA1

    6b877f1b77945405a5fb6e0280cf8bcd6164de0e

  • SHA256

    f79d78fc34936f3fade6e3fdc0c60a632cf3c4399bcdb72fca91d7a96edc4971

  • SHA512

    f8cacb425a440341b5e74a2f0799579597b1f609d2550183178625f8de3b8edacb3e665f7987f1dba6341634874065aa8a2a59f0e5c8d0b35f80a06ac8284ef5

  • SSDEEP

    6144:MJLWAmTu9YBu5KOyLwzaASd6UrRgoxJgTBI:MJqAV2BuFyLwlGRxYT

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      aebf139b7872db35a814631c6edd15ad_JaffaCakes118

    • Size

      251KB

    • MD5

      aebf139b7872db35a814631c6edd15ad

    • SHA1

      6b877f1b77945405a5fb6e0280cf8bcd6164de0e

    • SHA256

      f79d78fc34936f3fade6e3fdc0c60a632cf3c4399bcdb72fca91d7a96edc4971

    • SHA512

      f8cacb425a440341b5e74a2f0799579597b1f609d2550183178625f8de3b8edacb3e665f7987f1dba6341634874065aa8a2a59f0e5c8d0b35f80a06ac8284ef5

    • SSDEEP

      6144:MJLWAmTu9YBu5KOyLwzaASd6UrRgoxJgTBI:MJqAV2BuFyLwlGRxYT

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks