Overview

overview

10

Static

static

3

5e5b371c5e...0f.exe

windows7-x64

10

5e5b371c5e...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d

  • Size

    203KB

  • Sample

    241223-2228xstrd1

  • MD5

    011493747c636ab0c9d72b3c48636280

  • SHA1

    08034a9ab3d3f9768f6ba86a10208817769650a6

  • SHA256

    73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d

  • SHA512

    0bff50d63c2d4ad4dc95fa03085b0a5a58de1726ed0ee06c9be0c02d4629b0c84d35f715d97f445833b8716ffb7996b71e00f4c4ba5d92bad5d8625adaaa9394

  • SSDEEP

    6144:L+3NScBUqlgC8gmbwVj0OAMa5D1fAUQS6Kzz3xv:L+dScBUqlgCnow9sN5D1fAqv

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

107.182.129.235

171.22.30.106

Targets

    • Target

      5e5b371c5e0c637ae119d80c65425ddfd79db7e87e539b46db93ec916a988d0f

    • Size

      368KB

    • MD5

      b0ea93be2b97136c752ef5bdfd040eac

    • SHA1

      660a07b3ba4d36fe24dc86488938d4b36de6645a

    • SHA256

      5e5b371c5e0c637ae119d80c65425ddfd79db7e87e539b46db93ec916a988d0f

    • SHA512

      6ca1a87997de85fd232068a998808c1390510fc13a7e17bf347b6cd63c5b6c883fc1f2b596f52ea6340ef340762125ae9ebe8cfde87a8ec63f2dd3e8db5635fb

    • SSDEEP

      3072:zXhaNBXoA7E5/GbfQlmhkIB4iZnXk+EOSpvMfBwJ3D1fAyQyjZ1QSv+8lYoU0RM:roBXoQE5Dhr0nUfOAMW5D1fAUQSKX

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks