gcleaner | 20e5765385bc92922a64f7454367d98a77693adfd62bcb4a44703705ddffbdb0 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...ea.exe

windows7-x64

JaffaCakes...ea.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_2e86f7dfe3f2f795ef1995bd9d6efdea
Size

390KB
Sample

250106-t4hcjatmaq
MD5

2e86f7dfe3f2f795ef1995bd9d6efdea
SHA1

a2c279c2c2ffd37bd6ee59eadfe037d7e3524c1e
SHA256

20e5765385bc92922a64f7454367d98a77693adfd62bcb4a44703705ddffbdb0
SHA512

1c3aca6e80ddd3353c0fcb62895c81b3e398a44d40539dba37768e11ca6eb0cb7657d4a1b4d3878a3e0317153a2629288f34e34d15f2b6eaea26aebd704b18d0
SSDEEP

6144:jt1zW2+ZjvI9IprJzx36m5ANPLJvlQmod4D+uvw3+6G:ZNzCjOIpU9LJvlQN4D+4I+x

Score

10^/10

gcleaner onlylogger discovery loader

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_2e86f7dfe3f2f795ef1995bd9d6efdea.exe

Resource

win7-20240903-en

gcleaner onlylogger discovery loader

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_2e86f7dfe3f2f795ef1995bd9d6efdea.exe

Resource

win10v2004-20241007-en

gcleaner onlylogger discovery loader

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Extracted

Family

gcleaner

C2

ppp-gl.biz

45.9.20.13

Targets

- Target
  
  JaffaCakes118_2e86f7dfe3f2f795ef1995bd9d6efdea
- Size
  
  390KB
- MD5
  
  2e86f7dfe3f2f795ef1995bd9d6efdea
- SHA1
  
  a2c279c2c2ffd37bd6ee59eadfe037d7e3524c1e
- SHA256
  
  20e5765385bc92922a64f7454367d98a77693adfd62bcb4a44703705ddffbdb0
- SHA512
  
  1c3aca6e80ddd3353c0fcb62895c81b3e398a44d40539dba37768e11ca6eb0cb7657d4a1b4d3878a3e0317153a2629288f34e34d15f2b6eaea26aebd704b18d0
- SSDEEP
  
  6144:jt1zW2+ZjvI9IprJzx36m5ANPLJvlQmod4D+uvw3+6G:ZNzCjOIpU9LJvlQN4D+4I+x
Score

10^/10

gcleaner onlylogger discovery loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Gcleaner family
  gcleaner
- OnlyLogger
  A tiny loader that uses IPLogger to get its payload.
  loader onlylogger
- Onlylogger family
  onlylogger
- OnlyLogger payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gcleaneronlyloggerdiscoveryloader

behavioral2

gcleaneronlyloggerdiscoveryloader

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.