General

  • Target

    eb7b671bb53f6c10f2f46255ba229832cc2d05b6076ba42ed098b39aaa2007e0

  • Size

    2.7MB

  • Sample

    241229-gfvlqstrez

  • MD5

    96c045c0618ce2dfdebbe590d2af14d2

  • SHA1

    8faa145332bd57921f260d04d98f9e08a88f5bbd

  • SHA256

    eb7b671bb53f6c10f2f46255ba229832cc2d05b6076ba42ed098b39aaa2007e0

  • SHA512

    b3a7a9d605e12166f8bde50919d66cc70714d7e54ec8b920ff0b4508ee04d7f0c31e88acd639dcf911a45b583362b23e3c79048fb411e0f8186c4ed1860b04b9

  • SSDEEP

    24576:kV5uTz4t00CFse18pBWJJJ6pc4s33YD8vnyfwd8C9lu595yxsCCH/OsYPR6Lojzn:kjuTz4W0CFs+KWKWy4HcJCMOsY4czn

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

37.139.129.24

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      eb7b671bb53f6c10f2f46255ba229832cc2d05b6076ba42ed098b39aaa2007e0

    • Size

      2.7MB

    • MD5

      96c045c0618ce2dfdebbe590d2af14d2

    • SHA1

      8faa145332bd57921f260d04d98f9e08a88f5bbd

    • SHA256

      eb7b671bb53f6c10f2f46255ba229832cc2d05b6076ba42ed098b39aaa2007e0

    • SHA512

      b3a7a9d605e12166f8bde50919d66cc70714d7e54ec8b920ff0b4508ee04d7f0c31e88acd639dcf911a45b583362b23e3c79048fb411e0f8186c4ed1860b04b9

    • SSDEEP

      24576:kV5uTz4t00CFse18pBWJJJ6pc4s33YD8vnyfwd8C9lu595yxsCCH/OsYPR6Lojzn:kjuTz4W0CFs+KWKWy4HcJCMOsY4czn

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks