General

  • Target

    f8db76628f58ae7d66a95d134c04895f_JaffaCakes118

  • Size

    379KB

  • Sample

    241216-nwg4xayqav

  • MD5

    f8db76628f58ae7d66a95d134c04895f

  • SHA1

    484b08726669838820e166d7621559e1bec8c3a1

  • SHA256

    4272379ced0fed89dfc74a080cd17269b34bef293cbfe4bd424abd500bf367fa

  • SHA512

    77cca8a8565d7e84a2dbc88814eec3f52b2fcce88fcd56f791c25b2fe7bd0e213b7ce0f8cf987fb69306924831b02aa87076656b1845870dfb53c89f2254ffca

  • SSDEEP

    6144:MmgDbiuBekKbKkNas2pevng1KuizqZhaNyG0Sbz:CauBekVkNas2Pgui+hu

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      f8db76628f58ae7d66a95d134c04895f_JaffaCakes118

    • Size

      379KB

    • MD5

      f8db76628f58ae7d66a95d134c04895f

    • SHA1

      484b08726669838820e166d7621559e1bec8c3a1

    • SHA256

      4272379ced0fed89dfc74a080cd17269b34bef293cbfe4bd424abd500bf367fa

    • SHA512

      77cca8a8565d7e84a2dbc88814eec3f52b2fcce88fcd56f791c25b2fe7bd0e213b7ce0f8cf987fb69306924831b02aa87076656b1845870dfb53c89f2254ffca

    • SSDEEP

      6144:MmgDbiuBekKbKkNas2pevng1KuizqZhaNyG0Sbz:CauBekVkNas2Pgui+hu

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks