General

  • Target

    728cffa0a14b4eee01867884a899dc2c.exe

  • Size

    5.0MB

  • Sample

    250218-haw32szjt9

  • MD5

    728cffa0a14b4eee01867884a899dc2c

  • SHA1

    167eb9d72caecf5145185e5eec4b01ffe14c1e05

  • SHA256

    cf8b362bc545c356a2cd44e406442446d796a8ed8f245cb1eb4568c9f9516d0c

  • SHA512

    571b0501b2bb32fee7f7dbeccd218030f5529546141595607ac9b4c5864289f65f5367a884899cc3dcf043132c3ed5a027614a2cb26c05242a23fcd201d81ddc

  • SSDEEP

    49152:cWLatBqcE4ft02kePb1OJqNR5n781la5W6tI9aVtdRKHNrZDqtEVSZ2gw76x1Kja:FaqcE42Sb1OJq778p6tKvVSq9

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.73

Targets

    • Target

      728cffa0a14b4eee01867884a899dc2c.exe

    • Size

      5.0MB

    • MD5

      728cffa0a14b4eee01867884a899dc2c

    • SHA1

      167eb9d72caecf5145185e5eec4b01ffe14c1e05

    • SHA256

      cf8b362bc545c356a2cd44e406442446d796a8ed8f245cb1eb4568c9f9516d0c

    • SHA512

      571b0501b2bb32fee7f7dbeccd218030f5529546141595607ac9b4c5864289f65f5367a884899cc3dcf043132c3ed5a027614a2cb26c05242a23fcd201d81ddc

    • SSDEEP

      49152:cWLatBqcE4ft02kePb1OJqNR5n781la5W6tI9aVtdRKHNrZDqtEVSZ2gw76x1Kja:FaqcE42Sb1OJq778p6tKvVSq9

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks