Overview

overview

10

Static

static

3

mixfour.exe

windows10-ltsc 2021-x64

10

mixfour.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mixfour.exe

  • Size

    432KB

  • Sample

    250114-zwhk8azma1

  • MD5

    29382d3310460696a70e00e314830631

  • SHA1

    a8c47074f6105d49dc5c84ef4fd217902d8101a5

  • SHA256

    8ded9d7cef5600c9d72e45d6f4377ff03c8182b1d854a15788c3de3fae8b0049

  • SHA512

    80e74872568d02c3243bd517987cf16e39fa38c1f698d90133c892bbd73c9179771d823edbd9948a7e6507fabf52a190ca46c09758ee0ecfac41a4743759a6a7

  • SSDEEP

    6144:3Q/QJLKGXoDN8/k9FMBBcz/ZnNG88X3rNFzeobg2yrgbJ8W1bVpmIks261T:3Q/QJGGXZoYuTZN8xFzyrWJ8mbJkmh

Score
10/10
gcleanerdiscoveryloader

Malware Config

Targets

    • Target

      mixfour.exe

    • Size

      432KB

    • MD5

      29382d3310460696a70e00e314830631

    • SHA1

      a8c47074f6105d49dc5c84ef4fd217902d8101a5

    • SHA256

      8ded9d7cef5600c9d72e45d6f4377ff03c8182b1d854a15788c3de3fae8b0049

    • SHA512

      80e74872568d02c3243bd517987cf16e39fa38c1f698d90133c892bbd73c9179771d823edbd9948a7e6507fabf52a190ca46c09758ee0ecfac41a4743759a6a7

    • SSDEEP

      6144:3Q/QJLKGXoDN8/k9FMBBcz/ZnNG88X3rNFzeobg2yrgbJ8W1bVpmIks261T:3Q/QJGGXZoYuTZN8xFzyrWJ8mbJkmh

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks