General

  • Target

    ff5d698fad039b90eec648304353d037_JaffaCakes118

  • Size

    384KB

  • Sample

    241219-lp4yzszlal

  • MD5

    ff5d698fad039b90eec648304353d037

  • SHA1

    3370709a2a74e0e33163391751fdce1b81c365dd

  • SHA256

    845641edc3a511126a17a1f0b733232a8f9752bde7a0b8190dffa3e387251456

  • SHA512

    6b78ea59bbc37fcd66557287e91cf06dbc21794eb41626a6248306c06cfa441a313ce2a9af811744e2c65e81eef563a24baaba04650dcee2ff54f42671b5c4b3

  • SSDEEP

    6144:jclHzEKDMiOiXTteyPYzdRTNHdLYGvRDQMhLns5LiNLnRq:QT/3OiXTteyERTNqYJVscNt

Malware Config

Extracted

Family

gcleaner

C2

gc-prtnrs.top

gcc-prtnrs.top

Targets

    • Target

      ff5d698fad039b90eec648304353d037_JaffaCakes118

    • Size

      384KB

    • MD5

      ff5d698fad039b90eec648304353d037

    • SHA1

      3370709a2a74e0e33163391751fdce1b81c365dd

    • SHA256

      845641edc3a511126a17a1f0b733232a8f9752bde7a0b8190dffa3e387251456

    • SHA512

      6b78ea59bbc37fcd66557287e91cf06dbc21794eb41626a6248306c06cfa441a313ce2a9af811744e2c65e81eef563a24baaba04650dcee2ff54f42671b5c4b3

    • SSDEEP

      6144:jclHzEKDMiOiXTteyPYzdRTNHdLYGvRDQMhLns5LiNLnRq:QT/3OiXTteyERTNqYJVscNt

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks