Overview

overview

10

Static

static

3

file.exe

windows10-2004-x64

10

file.exe

windows10-ltsc_2021-x64

10

file.exe

windows11-21h2-x64

10

Resubmissions

04/08/2025, 20:19

250804-y3yeksxjv610

11/07/2023, 09:51

230711-lvjv1ahc5x10

13/01/2023, 11:37

230113-nq98hacc5y10

13/01/2023, 11:32

230113-nnrclsge8810

13/01/2023, 11:26

230113-nj75kacc2x10

13/01/2023, 11:18

230113-nd9q7scb7w10

Sharing

Copy URL Twitter E-mail

General

  • Target
    file.exe
  • Size 1.4MB
  • Sample250804-y3yeksxjv6
  • SHA256 2cfbc02e7d51a05a7fc6df05a436402a139d19bfc0df1acee0c2e579fe9ccc17
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gcleanerdiscoveryloader

Malware Config

Extracted

Family

  • gcleaner

C2

  • 45.139.105.171

  • 85.31.46.167

  • 107.182.129.235

  • 171.22.30.106

Targets

    • Target
      file.exe
    • Size 1.4MB
    • SHA256 2cfbc02e7d51a05a7fc6df05a436402a139d19bfc0df1acee0c2e579fe9ccc17
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gcleanerdiscoveryloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Gcleaner family

      gcleaner

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks