General

  • Target

    dae456f36263fa7dcf6a4217d9f1ede8e46d5408c63f2bd49a8dc85d95a263dd

  • Size

    2.2MB

  • Sample

    241229-tbmrjstrhp

  • MD5

    3cbbdde564427795fab90fdddb4ecf05

  • SHA1

    83863a0e3e256e4b03e6d22f49d2371e342f34e2

  • SHA256

    dae456f36263fa7dcf6a4217d9f1ede8e46d5408c63f2bd49a8dc85d95a263dd

  • SHA512

    960c30e38478bcca903dce6c772f0d022596c6ecd669d77f6846f68638a1003a59c990e0de36aa5acefe94fdc72dc286ce063e38a3602dd67d95f5865d989d2d

  • SSDEEP

    24576:Cmd/rw97o4zo2hM3Mr7KcxHxNhW1DdcRA4/L69B83/g8WW+3vh8bWXmMmmQfB2m0:LETRlr7KcJQEBo8WWaZTXoL2mcSde7w8

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

87.251.71.107

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      dae456f36263fa7dcf6a4217d9f1ede8e46d5408c63f2bd49a8dc85d95a263dd

    • Size

      2.2MB

    • MD5

      3cbbdde564427795fab90fdddb4ecf05

    • SHA1

      83863a0e3e256e4b03e6d22f49d2371e342f34e2

    • SHA256

      dae456f36263fa7dcf6a4217d9f1ede8e46d5408c63f2bd49a8dc85d95a263dd

    • SHA512

      960c30e38478bcca903dce6c772f0d022596c6ecd669d77f6846f68638a1003a59c990e0de36aa5acefe94fdc72dc286ce063e38a3602dd67d95f5865d989d2d

    • SSDEEP

      24576:Cmd/rw97o4zo2hM3Mr7KcxHxNhW1DdcRA4/L69B83/g8WW+3vh8bWXmMmmQfB2m0:LETRlr7KcJQEBo8WWaZTXoL2mcSde7w8

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks