General

  • Target

    JaffaCakes118_304a8ac0b594f92c321faf971a86673a

  • Size

    389KB

  • Sample

    250106-vvxljavjbq

  • MD5

    304a8ac0b594f92c321faf971a86673a

  • SHA1

    ab8e54e84d6a34138f30aa8cf0b3f3706da52c7b

  • SHA256

    4451f8b77053fc5a95e678582a2711b13e82be6d3132c858f36db5e0d016f251

  • SHA512

    f674a3deac2fac5a507a3c4ee956bf1379854a6baf0beda604f39254a931cc09b15993df0761deb2ccf3550a03b53e4db8ab261456c6ec44da19a7e526e89a64

  • SSDEEP

    12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn:qgFjRUHHagC9PD

Malware Config

Extracted

Family

gcleaner

C2

gcl-gb.biz

45.9.20.13

Targets

    • Target

      JaffaCakes118_304a8ac0b594f92c321faf971a86673a

    • Size

      389KB

    • MD5

      304a8ac0b594f92c321faf971a86673a

    • SHA1

      ab8e54e84d6a34138f30aa8cf0b3f3706da52c7b

    • SHA256

      4451f8b77053fc5a95e678582a2711b13e82be6d3132c858f36db5e0d016f251

    • SHA512

      f674a3deac2fac5a507a3c4ee956bf1379854a6baf0beda604f39254a931cc09b15993df0761deb2ccf3550a03b53e4db8ab261456c6ec44da19a7e526e89a64

    • SSDEEP

      12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn:qgFjRUHHagC9PD

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks