gcleaner

General

Target
random.exe
Size 3.5MB
Sample250820-sfkbjsgp4z
SHA256 75ebdbe16e4e04a657bb1a54f48b6951d1b0a191e79f27d2dbdbf2a4afe929c3
MD5 a9452a306bef9139dc7d80fb222f01e7
SHA1 5e2cf680e3d84c4d64393c2488fa52a5fb286b60
SHA512 6906629377dfd0c644c83b7567704e154954bd8bbabdfac9ff70829faf3d3d79d08b680f4e3fcef201bea514e8f712c06adeccf5cea1d0736656878de89e873f
SSDEEP 49152:VME5gQITN6er51QzEHXHeBpx86kg9XHLoCWkP3vC4F4LyJqecQAO66e7:VMUNqprExUglZLXCWeQAO66m
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98
45.91.200.135

Targets

- Target
  random.exe
- Size 3.5MB
- SHA256 75ebdbe16e4e04a657bb1a54f48b6951d1b0a191e79f27d2dbdbf2a4afe929c3
- MD5 a9452a306bef9139dc7d80fb222f01e7
- SHA1 5e2cf680e3d84c4d64393c2488fa52a5fb286b60
- SHA512 6906629377dfd0c644c83b7567704e154954bd8bbabdfac9ff70829faf3d3d79d08b680f4e3fcef201bea514e8f712c06adeccf5cea1d0736656878de89e873f
- SSDEEP 49152:VME5gQITN6er51QzEHXHeBpx86kg9XHLoCWkP3vC4F4LyJqecQAO66e7:VMUNqprExUglZLXCWeQAO66m
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

gcleaner discovery loader
- GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Gcleaner family
  gcleaner
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Gcleaner family

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3