General

  • Target

    JaffaCakes118_51dcd1ffb9933ad7b1ff66352bc2ca3871c97ad37f5745724d08283a9aaf61e9

  • Size

    203KB

  • Sample

    241229-h9kjaswndv

  • MD5

    7e486d17c58e2d76fce1cd0d958d2244

  • SHA1

    cf914941097d4dad5ee627c7e37740c58c22bc6f

  • SHA256

    51dcd1ffb9933ad7b1ff66352bc2ca3871c97ad37f5745724d08283a9aaf61e9

  • SHA512

    e0efbb26c71fdddb46e85f2677731a4530407ed3bc77e09d0c12b792491d62f0e5f70959582c06f3766702947a9296828583a58c35f0f6530806ff0eff93774b

  • SSDEEP

    6144:nAqj9WmtFCNJYNKqEer90kQDF3o20+NiMWS:AqjHrC/YNPeDJ3T0kiK

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

107.182.129.235

171.22.30.106

Targets

    • Target

      c48514bbe7267475efa73e060df1ea05c379665fa7d69b0c2e90af8559a64994

    • Size

      369KB

    • MD5

      3e7433b8b635495eac657e2cb54958a1

    • SHA1

      ae6a65a5b7caf9bbffde0735d333bb7952cef759

    • SHA256

      c48514bbe7267475efa73e060df1ea05c379665fa7d69b0c2e90af8559a64994

    • SHA512

      bdf73d235fa9568a155a9fce5eac480a08962a1ef3d6bb2433f50c7643d671b30b31d5f2f05ab2b7acf3020b90c863fd7329372954af6da306475c74daa7c42c

    • SSDEEP

      6144:R8M1ERLgmtFCNzYNKqEeB90KQDF3ohWUZrON/:R8iERLjrCFYNdeFJ3Y2

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks