Overview

overview

10

Static

static

3

3fe0c2f060...a9.exe

windows7-x64

10

3fe0c2f060...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9

  • Size

    2.8MB

  • Sample

    250115-hr4jfsvkas

  • MD5

    939fd770e4d4763f85efb923a1e7ea37

  • SHA1

    ce70ed620bfe5a25b45d83c9e99ace3a09426221

  • SHA256

    3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9

  • SHA512

    dd26bcd46b6ce139d257a47f41a12db145e3b814de2f4e082f90cb588a3e05a92b36b46126c9aec6941d3a89e618d57f36ec64567ec8e4c3d52d65f6dc4620f5

  • SSDEEP

    24576:ggJdrsBibJ60h7R2yGWHPApPMMcfMErldxfhzLEiL18iIVcaRIfMQ8PXFfA0rYw:TrsBibvh7R2yGLc0ifzLEkYXuCPXFt

Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

gcleaner

C2

85.31.45.39

85.31.45.250

85.31.45.251

85.31.45.88
Attributes
  • url_path

    /b.php

    /d.php

    /d.php

Targets

    • Target

      3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9

    • Size

      2.8MB

    • MD5

      939fd770e4d4763f85efb923a1e7ea37

    • SHA1

      ce70ed620bfe5a25b45d83c9e99ace3a09426221

    • SHA256

      3fe0c2f06092783796237462cd360090687e3b60895857dbe969651df632cda9

    • SHA512

      dd26bcd46b6ce139d257a47f41a12db145e3b814de2f4e082f90cb588a3e05a92b36b46126c9aec6941d3a89e618d57f36ec64567ec8e4c3d52d65f6dc4620f5

    • SSDEEP

      24576:ggJdrsBibJ60h7R2yGWHPApPMMcfMErldxfhzLEiL18iIVcaRIfMQ8PXFfA0rYw:TrsBibvh7R2yGLc0ifzLEkYXuCPXFt

    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks