General

  • Target

    JaffaCakes118_97d32591342b217475d97f573fce9b4c

  • Size

    382KB

  • Sample

    250105-kfhtqaymes

  • MD5

    97d32591342b217475d97f573fce9b4c

  • SHA1

    eae87d5a63f830f4418ab18df3d77ac76ea77583

  • SHA256

    22ce5c4c7ac68256b9aa6805a89c2e8a91124929183e8428cd87d8faa6cef1cd

  • SHA512

    0dc436b7e6fda187f65b4cbbdb5f93842a2b54d72fa7eaf3e484e58d01818221a5df009721a679a1af0b305cce2d371c9a977d15d63f328c8ad0dc1574bc0b4d

  • SSDEEP

    6144:oZxtEtOv2Lk4dWzch7Q5GdATqyOFG/d5KnRn0XcBLj+/d6:Cv2Lk4dWzk7QU2TqyOodIRn0Xmn46

Malware Config

Extracted

Family

gcleaner

C2

ggg-cl.biz

45.9.20.13

Targets

    • Target

      JaffaCakes118_97d32591342b217475d97f573fce9b4c

    • Size

      382KB

    • MD5

      97d32591342b217475d97f573fce9b4c

    • SHA1

      eae87d5a63f830f4418ab18df3d77ac76ea77583

    • SHA256

      22ce5c4c7ac68256b9aa6805a89c2e8a91124929183e8428cd87d8faa6cef1cd

    • SHA512

      0dc436b7e6fda187f65b4cbbdb5f93842a2b54d72fa7eaf3e484e58d01818221a5df009721a679a1af0b305cce2d371c9a977d15d63f328c8ad0dc1574bc0b4d

    • SSDEEP

      6144:oZxtEtOv2Lk4dWzch7Q5GdATqyOFG/d5KnRn0XcBLj+/d6:Cv2Lk4dWzk7QU2TqyOodIRn0Xmn46

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks