General

  • Target

    80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe

  • Size

    266KB

  • Sample

    241207-2ngeasxqfz

  • MD5

    1102cdc49752fd9a3019f78c094ecec0

  • SHA1

    c492d7d3a911f5a4c2e94b4234fb8c425a9b37c8

  • SHA256

    80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52

  • SHA512

    c4d34ce58dff3b0d17bf8caefed7b32c5904d7b99b70a42fcd0973222b6de47cd91861ce13a06fbccb650aaef16ca9a02d76905e31494b0c44db18c37b98131c

  • SSDEEP

    6144:sbl+Mk9MptqB9MbItgwZK7z242GmtoBUU:csMDM9M0tgjn242i

Malware Config

Extracted

Family

gcleaner

C2

92.63.197.221

45.91.200.135

Targets

    • Target

      80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe

    • Size

      266KB

    • MD5

      1102cdc49752fd9a3019f78c094ecec0

    • SHA1

      c492d7d3a911f5a4c2e94b4234fb8c425a9b37c8

    • SHA256

      80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52

    • SHA512

      c4d34ce58dff3b0d17bf8caefed7b32c5904d7b99b70a42fcd0973222b6de47cd91861ce13a06fbccb650aaef16ca9a02d76905e31494b0c44db18c37b98131c

    • SSDEEP

      6144:sbl+Mk9MptqB9MbItgwZK7z242GmtoBUU:csMDM9M0tgjn242i

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks