gcleaner | 923d92d7d64914f92dde8bb3aca5dcfa44f6f7ca0d5b57f8a1d81113f0a7b8d0 | Triage

Sharing

General

Target

2808-15-0x0000000000400000-0x000000000042F000-memory.dmp
Size

188KB
Sample

250209-p82vhs1qhj
MD5

59332615448ff60b9b46caad68a28c84
SHA1

afeae723c29b82184d85502e4d38ab1ef83171f2
SHA256

923d92d7d64914f92dde8bb3aca5dcfa44f6f7ca0d5b57f8a1d81113f0a7b8d0
SHA512

be93dfb2366b564ba07b968b4c092e107ae1ccdb3efbb07650aaf59ffc010f862218d5cf209b9a51908b663f1ab9f4f03b7e6494460bd816f82a2ccc8dc736d2
SSDEEP

3072:Jok9o3s4V6lyB2FpacJam0YemgJvICtaB+RTcpSQP+/Y5970/4P+CYpF/PquRq49:uk9o3sblyB2FpacJam0YemgJvICtaB+R

Score

10^/10

gcleaner discovery

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.23

Targets

- Target
  
  2808-15-0x0000000000400000-0x000000000042F000-memory.dmp
- Size
  
  188KB
- MD5
  
  59332615448ff60b9b46caad68a28c84
- SHA1
  
  afeae723c29b82184d85502e4d38ab1ef83171f2
- SHA256
  
  923d92d7d64914f92dde8bb3aca5dcfa44f6f7ca0d5b57f8a1d81113f0a7b8d0
- SHA512
  
  be93dfb2366b564ba07b968b4c092e107ae1ccdb3efbb07650aaf59ffc010f862218d5cf209b9a51908b663f1ab9f4f03b7e6494460bd816f82a2ccc8dc736d2
- SSDEEP
  
  3072:Jok9o3s4V6lyB2FpacJam0YemgJvICtaB+RTcpSQP+/Y5970/4P+CYpF/PquRq49:uk9o3sblyB2FpacJam0YemgJvICtaB+R
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2