General

  • Target

    2bd847b22188ab22d5f15adad5205e373d11758ffacc689b1645b366b6c2e61f

  • Size

    2.9MB

  • Sample

    241225-ykwg9svmfy

  • MD5

    39b79c020a8bd60e30610fa71d20d921

  • SHA1

    6060bd45bf76a0c318ecdf0b5cf4d48c41c9b44c

  • SHA256

    2bd847b22188ab22d5f15adad5205e373d11758ffacc689b1645b366b6c2e61f

  • SHA512

    fe49e03d4d9b7370ffab23f1c46f8966fe33053ea34ca1a4c3d7a88b63bb7cf6595abcd2e989b24e7380586aeb9e15a19c3435a782acd99dcde983a9d45d1e89

  • SSDEEP

    24576:9A5seDL0YfwfOAe1TW04z0W7xRGuhY8zcjMgDtQtsYLe4eVyobam+FMAny4/:qtDL0vWAf2W77BjcYWKttLZ7Rh

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

37.139.129.24

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      2bd847b22188ab22d5f15adad5205e373d11758ffacc689b1645b366b6c2e61f

    • Size

      2.9MB

    • MD5

      39b79c020a8bd60e30610fa71d20d921

    • SHA1

      6060bd45bf76a0c318ecdf0b5cf4d48c41c9b44c

    • SHA256

      2bd847b22188ab22d5f15adad5205e373d11758ffacc689b1645b366b6c2e61f

    • SHA512

      fe49e03d4d9b7370ffab23f1c46f8966fe33053ea34ca1a4c3d7a88b63bb7cf6595abcd2e989b24e7380586aeb9e15a19c3435a782acd99dcde983a9d45d1e89

    • SSDEEP

      24576:9A5seDL0YfwfOAe1TW04z0W7xRGuhY8zcjMgDtQtsYLe4eVyobam+FMAny4/:qtDL0vWAf2W77BjcYWKttLZ7Rh

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks