General

  • Target

    86a80770af9fd7886ec8c9f6e0fdb43ba91735303b2dca111809d7f5185e29d3

  • Size

    2.7MB

  • Sample

    241225-t696bsymfw

  • MD5

    05f6febf2b9bad0effe37930144bcc0d

  • SHA1

    f85535b2f947a44b9d2e8f476ca06dfe4d0bec93

  • SHA256

    86a80770af9fd7886ec8c9f6e0fdb43ba91735303b2dca111809d7f5185e29d3

  • SHA512

    3bfc440489f1c9c3e0780a5f78343fddcc8959c290c384dbc4618260b82dc393550b36649a8fb5697575fc61c4d346d0bb437638ce5adf0df7ffb9324ec5769b

  • SSDEEP

    49152:wAiP7L43MGCFIcIssAYQU1FQ3c3mIUVfl65KEhXCg8Yb:hgL+NssDMc3mIUVfM5KeXCgN

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

37.139.129.24

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      86a80770af9fd7886ec8c9f6e0fdb43ba91735303b2dca111809d7f5185e29d3

    • Size

      2.7MB

    • MD5

      05f6febf2b9bad0effe37930144bcc0d

    • SHA1

      f85535b2f947a44b9d2e8f476ca06dfe4d0bec93

    • SHA256

      86a80770af9fd7886ec8c9f6e0fdb43ba91735303b2dca111809d7f5185e29d3

    • SHA512

      3bfc440489f1c9c3e0780a5f78343fddcc8959c290c384dbc4618260b82dc393550b36649a8fb5697575fc61c4d346d0bb437638ce5adf0df7ffb9324ec5769b

    • SSDEEP

      49152:wAiP7L43MGCFIcIssAYQU1FQ3c3mIUVfl65KEhXCg8Yb:hgL+NssDMc3mIUVfM5KeXCgN

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks