General

  • Target

    2d1c8cd1773467b8da9638a58790cea26393f3c393ce7a36c6b9ee33cebfc736

  • Size

    3.2MB

  • Sample

    250118-jfdpbsxqap

  • MD5

    4fdc5c9dc5d0a4ca7b8ced1b7038f66b

  • SHA1

    faee6ed39ff4267451907dc0ab746692077a0806

  • SHA256

    2d1c8cd1773467b8da9638a58790cea26393f3c393ce7a36c6b9ee33cebfc736

  • SHA512

    5897e2498278fcd993690da2ca5ad105a435e3932372e8029ff5f90367d4098db76782b12a10044535c90177369cbbf8efe7bd5415dd83b0e6228f8b47d9f0ad

  • SSDEEP

    49152:6xeYLDWNtmMOWu67ff5531qWO0jkKdFcP20Ad/49:6NLDWNtmMZu6N5QWlkKdCPlT

Malware Config

Extracted

Family

gcleaner

C2

62.197.136.41

87.251.71.107

62.197.136.196

2.56.57.69

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      2d1c8cd1773467b8da9638a58790cea26393f3c393ce7a36c6b9ee33cebfc736

    • Size

      3.2MB

    • MD5

      4fdc5c9dc5d0a4ca7b8ced1b7038f66b

    • SHA1

      faee6ed39ff4267451907dc0ab746692077a0806

    • SHA256

      2d1c8cd1773467b8da9638a58790cea26393f3c393ce7a36c6b9ee33cebfc736

    • SHA512

      5897e2498278fcd993690da2ca5ad105a435e3932372e8029ff5f90367d4098db76782b12a10044535c90177369cbbf8efe7bd5415dd83b0e6228f8b47d9f0ad

    • SSDEEP

      49152:6xeYLDWNtmMOWu67ff5531qWO0jkKdFcP20Ad/49:6NLDWNtmMZu6N5QWlkKdCPlT

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks