General

  • Target

    JaffaCakes118_298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

  • Size

    325KB

  • Sample

    241224-regzcszjam

  • MD5

    5b9d4664c506bb4b3d0f07a43d4dbd97

  • SHA1

    7fb7dba9f978f2adcd6da1902a7a65dd44b12720

  • SHA256

    298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

  • SHA512

    db565070e68e815cb4dd38bd4c7efa91ca049dc98e2f8ff40896d04debf6087c2626092165079e77bd4a9d56c9f00b8f1d74be750491b90c6af1403227a5127e

  • SSDEEP

    3072:/EXO1nq2MxViHsnq5n3r6HxophUz6ktkM8bf4Avp2ZEfqqJ5ew3LlgtI17Df/Ts3:4qqMsUmHUhEtAQAcEfq2pblOIf1pm0

Malware Config

Extracted

Family

gcleaner

C2

45.139.105.171

85.31.46.167

107.182.129.235

171.22.30.106

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Targets

    • Target

      JaffaCakes118_298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

    • Size

      325KB

    • MD5

      5b9d4664c506bb4b3d0f07a43d4dbd97

    • SHA1

      7fb7dba9f978f2adcd6da1902a7a65dd44b12720

    • SHA256

      298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

    • SHA512

      db565070e68e815cb4dd38bd4c7efa91ca049dc98e2f8ff40896d04debf6087c2626092165079e77bd4a9d56c9f00b8f1d74be750491b90c6af1403227a5127e

    • SSDEEP

      3072:/EXO1nq2MxViHsnq5n3r6HxophUz6ktkM8bf4Avp2ZEfqqJ5ew3LlgtI17Df/Ts3:4qqMsUmHUhEtAQAcEfq2pblOIf1pm0

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks