gcleaner | 0cf30f3b303f2dbf0d49c0990f941f74a1a4f93964201a61875275b5e3f98523

General

Target
3E38714E6D1FA83101B29BEA74900BC1.exe
Size 39.5MB
Sample261025-nzt8msg18p
SHA256 0cf30f3b303f2dbf0d49c0990f941f74a1a4f93964201a61875275b5e3f98523
MD5 3e38714e6d1fa83101b29bea74900bc1
SHA1 a9d3cbef3afd99ad41555ff101ac9e929d959819
SHA512 c308aedf80cfa3774c98388d79511b527697db996d609e81127c1c11efdef97d9ff44854afecb2db10565d6afbad83ed02c69f9f6afd96f4417832eb91375d86
SSDEEP 3072:8cDCHPjgPsy2IRAuML488usPjw/Cz99wJRcQS6bm11nEhTPtxkBDwLvbgsnx4KJP:tDC7g0ybMr4uCzSaQhbmrquwLDhB
TLSH
T114978C117592C432D16E263019F4EBB1897EBD251B31CA9B77A01FBE4E312E25930F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

gcleaner

C2

ggg-cl.biz
45.9.20.13

Targets

- Target
  3E38714E6D1FA83101B29BEA74900BC1.exe
- Size 39.5MB
- SHA256 0cf30f3b303f2dbf0d49c0990f941f74a1a4f93964201a61875275b5e3f98523
- MD5 3e38714e6d1fa83101b29bea74900bc1
- SHA1 a9d3cbef3afd99ad41555ff101ac9e929d959819
- SHA512 c308aedf80cfa3774c98388d79511b527697db996d609e81127c1c11efdef97d9ff44854afecb2db10565d6afbad83ed02c69f9f6afd96f4417832eb91375d86
- SSDEEP 3072:8cDCHPjgPsy2IRAuML488usPjw/Cz99wJRcQS6bm11nEhTPtxkBDwLvbgsnx4KJP:tDC7g0ybMr4uCzSaQhbmrquwLDhB
- TLSH
  T114978C117592C432D16E263019F4EBB1897EBD251B31CA9B77A01FBE4E312E25930F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery gcleaner onlylogger loader
- Family: GCleaner
  GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
  loader gcleaner
- Family: OnlyLogger
  A tiny loader that uses IPLogger to get its payload.
  loader onlylogger
- OnlyLogger payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: GCleaner

Family: OnlyLogger

OnlyLogger payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2