General

  • Target

    JaffaCakes118_7e8c908350a3cc5290846a2fc29f82f87d92f2ab391cfda9052facd690640e58

  • Size

    957KB

  • Sample

    241222-c8v1ra1jbk

  • MD5

    7207fa9a4d34f565d145806e433a58cb

  • SHA1

    a381f5e346112b19e559b9e4a9b3986017c847ff

  • SHA256

    7e8c908350a3cc5290846a2fc29f82f87d92f2ab391cfda9052facd690640e58

  • SHA512

    ff8cdc3bf58ca44a0c14175ea9935fd1253c8271d97fdfe5711b1eea7350323813b2430ae9eaf2f85c7e7f5b5529802cc65f749b1c3014516ecfc933dfae4234

  • SSDEEP

    24576:AbNojCNKnoyEtPZ9Z0WeUnZ0WelLkzjF+4+LkzjF+4:tutbZ0WeUnZ0WelLkzjFALkzjF

Malware Config

Extracted

Family

gcleaner

C2

g-clean.in

gclean.biz

Targets

    • Target

      JaffaCakes118_7e8c908350a3cc5290846a2fc29f82f87d92f2ab391cfda9052facd690640e58

    • Size

      957KB

    • MD5

      7207fa9a4d34f565d145806e433a58cb

    • SHA1

      a381f5e346112b19e559b9e4a9b3986017c847ff

    • SHA256

      7e8c908350a3cc5290846a2fc29f82f87d92f2ab391cfda9052facd690640e58

    • SHA512

      ff8cdc3bf58ca44a0c14175ea9935fd1253c8271d97fdfe5711b1eea7350323813b2430ae9eaf2f85c7e7f5b5529802cc65f749b1c3014516ecfc933dfae4234

    • SSDEEP

      24576:AbNojCNKnoyEtPZ9Z0WeUnZ0WelLkzjF+4+LkzjF+4:tutbZ0WeUnZ0WelLkzjFALkzjF

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks