Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d718d1921e8b14b95fd804850dfde924353c8055f8416c7bbacb6369a59f29b4

  • Size

    362KB

  • Sample

    240624-y94vyavclp

  • MD5

    e73bb2c54e7c53ea85c7595f2634a606

  • SHA1

    64d0ddbb030555a916e8aa0853488fa56afcb609

  • SHA256

    d718d1921e8b14b95fd804850dfde924353c8055f8416c7bbacb6369a59f29b4

  • SHA512

    e64e552af4f10326888dc30e2de5d507055fc554c16e2dddbe28fdb7edba9f10de5a8240da096bd955315a8b164a722f1542f610488a789c0ec47d90243126e9

  • SSDEEP

    6144:qaLXlyVeiauyQPn72rVsFkqMEDkqwU/4UJP:1blyTabQpFkKk

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      d718d1921e8b14b95fd804850dfde924353c8055f8416c7bbacb6369a59f29b4

    • Size

      362KB

    • MD5

      e73bb2c54e7c53ea85c7595f2634a606

    • SHA1

      64d0ddbb030555a916e8aa0853488fa56afcb609

    • SHA256

      d718d1921e8b14b95fd804850dfde924353c8055f8416c7bbacb6369a59f29b4

    • SHA512

      e64e552af4f10326888dc30e2de5d507055fc554c16e2dddbe28fdb7edba9f10de5a8240da096bd955315a8b164a722f1542f610488a789c0ec47d90243126e9

    • SSDEEP

      6144:qaLXlyVeiauyQPn72rVsFkqMEDkqwU/4UJP:1blyTabQpFkKk

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks