General
- Target setup_euone.bin.exe
- Size 648KB
- Sample261015-mpyyeahs9k
- SHA256 65a9dc5c5c47a3dce3e6cf283ed8836f02f3dc07f45b7bba71be953d7cec05ec
Score
10/10
Malware Config
Extracted
Family
-
gcleaner
C2
-
185.156.73.98
Targets
-
- Target setup_euone.bin.exe
- Size 648KB
- SHA256 65a9dc5c5c47a3dce3e6cf283ed8836f02f3dc07f45b7bba71be953d7cec05ec
Score10/10-
Family: GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext