gcleaner | 7d8fb65dc6b8c0d5f62b5bb212b8e0eb68233f2d4ba22a02a1bd978d01f29699 | Triage

Sharing

General

Target

2416-1173-0x0000000000400000-0x0000000000C7E000-memory.dmp
Size

8.5MB
Sample

250209-p46b5s1pgn
MD5

8c439dea876e3deb8324058b7c68b903
SHA1

08ac7b4c159eaf26dc5f65ec502cf96606cab24e
SHA256

7d8fb65dc6b8c0d5f62b5bb212b8e0eb68233f2d4ba22a02a1bd978d01f29699
SHA512

1d992d7228fa7a6ebaa0e8c26a7d07bf086e133c7d4d6ea8d08f04ce08e350f2281b744014790b3d6387b6b135ca9a2dc5eb1082ad84e16ff2859fe40d41cead
SSDEEP

98304:mcp7pspGrXuP0NM2OkzX4/xRMsbWqP4z/xkkJVZMYxqb:DF+x27io/VvM/

Score

10^/10

gcleaner discovery

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.23

Targets

- Target
  
  2416-1173-0x0000000000400000-0x0000000000C7E000-memory.dmp
- Size
  
  8.5MB
- MD5
  
  8c439dea876e3deb8324058b7c68b903
- SHA1
  
  08ac7b4c159eaf26dc5f65ec502cf96606cab24e
- SHA256
  
  7d8fb65dc6b8c0d5f62b5bb212b8e0eb68233f2d4ba22a02a1bd978d01f29699
- SHA512
  
  1d992d7228fa7a6ebaa0e8c26a7d07bf086e133c7d4d6ea8d08f04ce08e350f2281b744014790b3d6387b6b135ca9a2dc5eb1082ad84e16ff2859fe40d41cead
- SSDEEP
  
  98304:mcp7pspGrXuP0NM2OkzX4/xRMsbWqP4z/xkkJVZMYxqb:DF+x27io/VvM/
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2