Overview

overview

10

Static

static

3

c44ca3f9c8...98.exe

windows7-x64

10

c44ca3f9c8...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c44ca3f9c85fc705e9c908378f6efdbadcacd6c4c6fed2f9a57c4f5cf8a61698

  • Size

    4.4MB

  • Sample

    250106-jkx9jazrhx

  • MD5

    9daf35ee204054a56e409a76cba9599a

  • SHA1

    0089b13d4d2853388eabf08029d8c01317533102

  • SHA256

    c44ca3f9c85fc705e9c908378f6efdbadcacd6c4c6fed2f9a57c4f5cf8a61698

  • SHA512

    4f7aae25c759250e10480a70957d240287950bd5c33a1ca404d3487cd6450d065815e6dce70ce9e8ba9575505b7a697faf888838c4324f1d8d29d9dcdb4d07f2

  • SSDEEP

    98304:CBvvQz+CfpZrr+rdLMWXg1wSWrrsep/0ATq:WUq5wAe

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

45.139.105.39

37.139.129.24

45.139.105.66

45.139.105.188
Attributes
  • url_path

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      c44ca3f9c85fc705e9c908378f6efdbadcacd6c4c6fed2f9a57c4f5cf8a61698

    • Size

      4.4MB

    • MD5

      9daf35ee204054a56e409a76cba9599a

    • SHA1

      0089b13d4d2853388eabf08029d8c01317533102

    • SHA256

      c44ca3f9c85fc705e9c908378f6efdbadcacd6c4c6fed2f9a57c4f5cf8a61698

    • SHA512

      4f7aae25c759250e10480a70957d240287950bd5c33a1ca404d3487cd6450d065815e6dce70ce9e8ba9575505b7a697faf888838c4324f1d8d29d9dcdb4d07f2

    • SSDEEP

      98304:CBvvQz+CfpZrr+rdLMWXg1wSWrrsep/0ATq:WUq5wAe

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks