General

  • Target

    rar.exe

  • Size

    392KB

  • Sample

    250223-3wcazsxrfk

  • MD5

    18488edb28f9d6bda06fa6bb7a3529c5

  • SHA1

    6e0a4286e24a220701f1d460c3c57b12c446106b

  • SHA256

    d6aa06fe25ed9f1b582251e01af0bbcb2d279f7fa57e8265c0823194793df309

  • SHA512

    8781b7e204bff1f79378c4bdfd4dba14fd9a3a968d5f858d1f291e5166ebe912d7d7315824a76fba25e6bfba82be6b8d1245dc74909825889c8aea1ef1b16b2c

  • SSDEEP

    6144:7DKqGZVEkU/krRcGV4wiiFCGJGh3CxHcTDH/MKItpZF2I:7eqmVXRcGV4wvCGJ+Cx8TDH/yXZF

Malware Config

Extracted

Family

gcleaner

C2

g-partners.top

g-partners.live

Targets

    • Target

      rar.exe

    • Size

      392KB

    • MD5

      18488edb28f9d6bda06fa6bb7a3529c5

    • SHA1

      6e0a4286e24a220701f1d460c3c57b12c446106b

    • SHA256

      d6aa06fe25ed9f1b582251e01af0bbcb2d279f7fa57e8265c0823194793df309

    • SHA512

      8781b7e204bff1f79378c4bdfd4dba14fd9a3a968d5f858d1f291e5166ebe912d7d7315824a76fba25e6bfba82be6b8d1245dc74909825889c8aea1ef1b16b2c

    • SSDEEP

      6144:7DKqGZVEkU/krRcGV4wiiFCGJGh3CxHcTDH/MKItpZF2I:7eqmVXRcGV4wvCGJ+Cx8TDH/yXZF

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • Onlylogger family

    • OnlyLogger payload

MITRE ATT&CK Enterprise v15

Tasks