General
- Target setup_euone.bin.exe
- Size 901KB
- Sample260927-cajvtswfmb
- SHA256 b14736ec77f8c85c7925dbab7630d93d717f1f0cd01b22c1d2678b21ebd70ff4
Score
10/10
Malware Config
Extracted
Family
-
gcleaner
C2
-
185.156.73.98
Targets
-
- Target setup_euone.bin.exe
- Size 901KB
- SHA256 b14736ec77f8c85c7925dbab7630d93d717f1f0cd01b22c1d2678b21ebd70ff4
Score10/10-
Family: GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext