General

  • Target

    ad425e2497dd0d0e3fadc7472e2cf5569c5ba5ca18671ab66ee512e2c1836405

  • Size

    2.9MB

  • Sample

    250109-hcmx6atrdq

  • MD5

    890fb176afaab99f933fa31630407cea

  • SHA1

    5de641372ffc4826a9140d4dcdc6fce6eed6b6cd

  • SHA256

    ad425e2497dd0d0e3fadc7472e2cf5569c5ba5ca18671ab66ee512e2c1836405

  • SHA512

    46ce9ac2bf202010ec1e47c486bab05c8633dd109bd69bd32773c210bdb081ce285156e5efd2dfa78eb25452f98dbec463898ee59efec61ba5eb6039f8366133

  • SSDEEP

    24576:oyThCC7L0Yqes+WajcXO+i8Rnq3IovzncSHTB/x6x/xgNjaIBVkxn4r10aemTS7M:1T8YL0/aMvDocoZvacr1fT+RQ

Malware Config

Extracted

Family

gcleaner

C2

208.67.106.156

37.139.129.24

193.151.183.73

208.67.104.141

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      ad425e2497dd0d0e3fadc7472e2cf5569c5ba5ca18671ab66ee512e2c1836405

    • Size

      2.9MB

    • MD5

      890fb176afaab99f933fa31630407cea

    • SHA1

      5de641372ffc4826a9140d4dcdc6fce6eed6b6cd

    • SHA256

      ad425e2497dd0d0e3fadc7472e2cf5569c5ba5ca18671ab66ee512e2c1836405

    • SHA512

      46ce9ac2bf202010ec1e47c486bab05c8633dd109bd69bd32773c210bdb081ce285156e5efd2dfa78eb25452f98dbec463898ee59efec61ba5eb6039f8366133

    • SSDEEP

      24576:oyThCC7L0Yqes+WajcXO+i8Rnq3IovzncSHTB/x6x/xgNjaIBVkxn4r10aemTS7M:1T8YL0/aMvDocoZvacr1fT+RQ

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks