General

  • Target

    JaffaCakes118_0e7580715b326da342ac34659ba9c9aa879aa6c0a8958fe57772a83000a64ba4

  • Size

    234KB

  • Sample

    241221-3jdnaatndv

  • MD5

    466683ee76914b1b18bf97e08d62766f

  • SHA1

    29f4f9ff71c246e56c1358885730d620b76a54a8

  • SHA256

    0e7580715b326da342ac34659ba9c9aa879aa6c0a8958fe57772a83000a64ba4

  • SHA512

    ee4f97f315fa78dc4b0e348da5585c7f62f19c67aba0c73e4ef4e25e284a5f3b93693571943381787fe820ce9027d4a5877da38cf5923ee653216dd1100943a9

  • SSDEEP

    6144:a6e7atLSqLyKyc4ojhZAdw0YFKf5SlQTAWxtxkFt6c42vtZm:aPp4N7VnAdWKf5SlQpxtmLrJvtZm

Malware Config

Extracted

Family

gcleaner

C2

45.139.105.171

85.31.46.167

107.182.129.235

171.22.30.106

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Targets

    • Target

      f1470d0bd0bd2a5ff0199ec3ef48b776a01a7961651d081b4b1f247b695466da

    • Size

      329KB

    • MD5

      11384252b8279a1256194fb56b9ea9f9

    • SHA1

      a4500cdb459a1f893c5b92627dcb23312362809b

    • SHA256

      f1470d0bd0bd2a5ff0199ec3ef48b776a01a7961651d081b4b1f247b695466da

    • SHA512

      4900b377f99cf05afcb4210799a967d22ca1638fdcb28c8f33838070f52bd0f32d285f42d454a69b85d546386c4b1edd5739c1efb496e3b259921a68191d92ae

    • SSDEEP

      3072:GXOW8eDHPKpe7LtX2jD7n5u1raKjpb2yc4o9GAZZmlEG9mIy4/xm42K0w26jsM/z:u3HP+e7L+Der/9Kyc4oZZmdmu/x0wq8

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks