General

  • Target

    c566c71c00095c6246783790cd1556b5_JaffaCakes118

  • Size

    385KB

  • Sample

    241205-clcwnaynep

  • MD5

    c566c71c00095c6246783790cd1556b5

  • SHA1

    767f2b25a2457bd29fd19eb7ad9d09cd9c488ea5

  • SHA256

    27056b49e0fe09639113c638bacd8773445ce3365b11059a8f66a436ca57c10d

  • SHA512

    2f2896416dd757d5202544f4d3dfa688e81ea5289fbbbd4625bce0d74f7ee4faf2ca34e9fa68f702876ad3531836c552e24b9ee94c9d67f646d7acb65f97e748

  • SSDEEP

    6144:yh+APDQ126OvAVJyD1kGmeXC78Ly/zC7j+cyXEDsCN:RAPk126OYVJFGme2rzg+XazN

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      c566c71c00095c6246783790cd1556b5_JaffaCakes118

    • Size

      385KB

    • MD5

      c566c71c00095c6246783790cd1556b5

    • SHA1

      767f2b25a2457bd29fd19eb7ad9d09cd9c488ea5

    • SHA256

      27056b49e0fe09639113c638bacd8773445ce3365b11059a8f66a436ca57c10d

    • SHA512

      2f2896416dd757d5202544f4d3dfa688e81ea5289fbbbd4625bce0d74f7ee4faf2ca34e9fa68f702876ad3531836c552e24b9ee94c9d67f646d7acb65f97e748

    • SSDEEP

      6144:yh+APDQ126OvAVJyD1kGmeXC78Ly/zC7j+cyXEDsCN:RAPk126OYVJFGme2rzg+XazN

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks