gcleaner | fc2553cbb23cd3b817a48edc4ee463ed3ccdaae442332ca7a1fc21db4aab20f2 | Triage

Sharing

General

Target

fc2553cbb23cd3b817a48edc4ee463ed3ccdaae442332ca7a1fc21db4aab20f2
Size

384KB
Sample

241213-aa6ngstnck
MD5

7e6464837a6db27fea165cd3e6b36651
SHA1

c9c821cd6ac4010e562a701f0e17c2520d387228
SHA256

fc2553cbb23cd3b817a48edc4ee463ed3ccdaae442332ca7a1fc21db4aab20f2
SHA512

1550b9c31da5009651ddc2c5d0c86fc0ac002c7d41fca0dad9734eaa9a70a1380847c0ae37a13077f8c1844b7664f4c91bda20349f0fe65fb3f6edeececac1fa
SSDEEP

6144:N2nQLJqe0KilHxCv1A6uL49Azc+aeQCWwj1G:EnQ9qhfXL4uzWeQCWS1G

Score

10^/10

gcleaner discovery loader

Malware Config

Targets

- Target
  
  fc2553cbb23cd3b817a48edc4ee463ed3ccdaae442332ca7a1fc21db4aab20f2
- Size
  
  384KB
- MD5
  
  7e6464837a6db27fea165cd3e6b36651
- SHA1
  
  c9c821cd6ac4010e562a701f0e17c2520d387228
- SHA256
  
  fc2553cbb23cd3b817a48edc4ee463ed3ccdaae442332ca7a1fc21db4aab20f2
- SHA512
  
  1550b9c31da5009651ddc2c5d0c86fc0ac002c7d41fca0dad9734eaa9a70a1380847c0ae37a13077f8c1844b7664f4c91bda20349f0fe65fb3f6edeececac1fa
- SSDEEP
  
  6144:N2nQLJqe0KilHxCv1A6uL49Azc+aeQCWwj1G:EnQ9qhfXL4uzWeQCWS1G
Score

10^/10

gcleaner discovery loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Gcleaner family
  gcleaner
- Downloads MZ/PE file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gcleanerdiscoveryloader

behavioral2

gcleanerdiscoveryloader