gcleaner | c8bdeba947d776b9ab80f1dcd965005e845679f93ec2ab05e76899927b7c8129 | Triage

Sharing

General

Target

c8bdeba947d776b9ab80f1dcd965005e845679f93ec2ab05e76899927b7c8129N.exe
Size

262KB
Sample

241225-xlrp2atkhr
MD5

0d8973073c5b934b0299e4f585f48440
SHA1

eea7fb7680db1674592b29e8d48ce7718ae0a1b8
SHA256

c8bdeba947d776b9ab80f1dcd965005e845679f93ec2ab05e76899927b7c8129
SHA512

feb9fded168594ce08ad824f3bc08d3ba05fd76d208a15aa790c75f9f549d5c08334c75685e5203e5318e14b8e5721cc8ef53b105c1b1e219df71417c357d26a
SSDEEP

3072:MsmZffApueDAyi6hWZLc6OHYbSSx9MKZRwM/J9XK9KVP5AKRr/bGTr6RC:MsYfjeDA+cc6ulO9MFg9XOwp/C6R

Score

10^/10

gcleaner discovery loader

Malware Config

Targets

- Target
  
  c8bdeba947d776b9ab80f1dcd965005e845679f93ec2ab05e76899927b7c8129N.exe
- Size
  
  262KB
- MD5
  
  0d8973073c5b934b0299e4f585f48440
- SHA1
  
  eea7fb7680db1674592b29e8d48ce7718ae0a1b8
- SHA256
  
  c8bdeba947d776b9ab80f1dcd965005e845679f93ec2ab05e76899927b7c8129
- SHA512
  
  feb9fded168594ce08ad824f3bc08d3ba05fd76d208a15aa790c75f9f549d5c08334c75685e5203e5318e14b8e5721cc8ef53b105c1b1e219df71417c357d26a
- SSDEEP
  
  3072:MsmZffApueDAyi6hWZLc6OHYbSSx9MKZRwM/J9XK9KVP5AKRr/bGTr6RC:MsYfjeDA+cc6ulO9MFg9XOwp/C6R
Score

10^/10

gcleaner discovery loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Gcleaner family
  gcleaner
- Downloads MZ/PE file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gcleanerdiscoveryloader

behavioral2

gcleanerdiscoveryloader