General

  • Target

    JaffaCakes118_cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea

  • Size

    186KB

  • Sample

    241224-yxgjwawnbm

  • MD5

    7242c1f824846fc4a1d08a58409f6632

  • SHA1

    54a94c696ff8cd0622b170a4fd1c7bd5cef53256

  • SHA256

    cf045d707469b315b0b3db3df9d7d0330ed350798cd0b8c872f0083b722ad6ea

  • SHA512

    c608b4f43eaa23022411883af23c31fde5cebe2eaa1d5c75f2d048416e62eb706a1784de66637cbb11adab7278e01bc33a04e87e688cdfc5810adc7513db76b6

  • SSDEEP

    3072:Zi2GpaKuv5eK0jRxGOyu+3j6otEnHpgdNS2N7RIYdeezAAat6u7brSMHaAiYa:Zi2pKuRvGd+vtGJgdRwezAF6u7/zaEa

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

107.182.129.235

171.22.30.106

Targets

    • Target

      699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a

    • Size

      245KB

    • MD5

      0cf83b2dda5e2a39ae64dec3aa87113e

    • SHA1

      c9113265bf7579c88bb227653866846b866c61f6

    • SHA256

      699f50563800eaf90fa9a22645004ad5c92ae62a0de9fd13545b44f564596b2a

    • SHA512

      b15761de5429ff263fd7b28c3c027cac096e6d6a976797956fcaea5226151699fa5e1d7879a83455f1e86d5884765f6e647f4a32c28af08af23eb996e62573be

    • SSDEEP

      6144:t62YFANstsRp/+vtGRgdRwezeF6u7kqJJ:pbsSH+vje7P

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks