General

  • Target

    JaffaCakes118_58d5bf32259ea9ddae6d6e80dc92d795

  • Size

    309KB

  • Sample

    250107-kkr8ystjex

  • MD5

    58d5bf32259ea9ddae6d6e80dc92d795

  • SHA1

    7ec0c11fdc7363998c72de7997324196c8dba1d4

  • SHA256

    f519ea0d39a931a45080d38a92be52d00b404c765da37a3f3c881fe5cf8c671a

  • SHA512

    02208107f5c5eca99aee098cec391c4dda8531023987dc61b013314041ab72675c4b4c6be81cf375302a60d3384b018e5073cde0491bd2883a597ed26d937355

  • SSDEEP

    6144:Za30xb98+cMz7h9QtI6xDISpTrDC8dWZtjeJIADG8el:Zi0xR8+PDCI8PgjKxD

Malware Config

Extracted

Family

gcleaner

C2

gcl-gb.biz

45.9.20.13

Targets

    • Target

      JaffaCakes118_58d5bf32259ea9ddae6d6e80dc92d795

    • Size

      309KB

    • MD5

      58d5bf32259ea9ddae6d6e80dc92d795

    • SHA1

      7ec0c11fdc7363998c72de7997324196c8dba1d4

    • SHA256

      f519ea0d39a931a45080d38a92be52d00b404c765da37a3f3c881fe5cf8c671a

    • SHA512

      02208107f5c5eca99aee098cec391c4dda8531023987dc61b013314041ab72675c4b4c6be81cf375302a60d3384b018e5073cde0491bd2883a597ed26d937355

    • SSDEEP

      6144:Za30xb98+cMz7h9QtI6xDISpTrDC8dWZtjeJIADG8el:Zi0xR8+PDCI8PgjKxD

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks