Overview

overview

10

Static

static

3

f44eb81d62...21.exe

windows7-x64

10

f44eb81d62...21.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f44eb81d6237ed610c7fe8aa7d6322cd0d1962d215564d07f8d65a543b05cc21

  • Size

    1.7MB

  • Sample

    241223-ee1egsvqhx

  • MD5

    b54e76beae8389aa6bc3153c547824cd

  • SHA1

    50363d52849de9cf9b3b2e729c29dab3e6515cae

  • SHA256

    f44eb81d6237ed610c7fe8aa7d6322cd0d1962d215564d07f8d65a543b05cc21

  • SHA512

    b28d0799ece049a0f33f6cd91a9e2a1f0dc691ec5396a3eb8ad7f442e1c689d91aa65c70fdef3b8c839bc9be699dbfb0e661d44c4d897e326c66a60af175c08e

  • SSDEEP

    24576:q6oQgWOPlTqjaLZpzkSBJ8B4qywiQ+VEwcaUwMwmdDAGQ8mb8M:qZ9TqjaLZpW1idXbz

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

85.208.136.148

85.208.136.56

85.208.136.48

85.208.136.87
Attributes
  • url_path

    /x.php

    /soft.php

    /soft.php

Targets

    • Target

      f44eb81d6237ed610c7fe8aa7d6322cd0d1962d215564d07f8d65a543b05cc21

    • Size

      1.7MB

    • MD5

      b54e76beae8389aa6bc3153c547824cd

    • SHA1

      50363d52849de9cf9b3b2e729c29dab3e6515cae

    • SHA256

      f44eb81d6237ed610c7fe8aa7d6322cd0d1962d215564d07f8d65a543b05cc21

    • SHA512

      b28d0799ece049a0f33f6cd91a9e2a1f0dc691ec5396a3eb8ad7f442e1c689d91aa65c70fdef3b8c839bc9be699dbfb0e661d44c4d897e326c66a60af175c08e

    • SSDEEP

      24576:q6oQgWOPlTqjaLZpzkSBJ8B4qywiQ+VEwcaUwMwmdDAGQ8mb8M:qZ9TqjaLZpW1idXbz

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks