Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad91fc211aab4094fe471f351d66df4d6b91f1b1577ae6cfad1b427f3ad888d8

  • Size

    393KB

  • Sample

    240625-3artjssdmj

  • MD5

    534d2124cd1edc00c79914c573db3cf8

  • SHA1

    3da089e273d10873c25124ba23c6bdfefb95576f

  • SHA256

    ad91fc211aab4094fe471f351d66df4d6b91f1b1577ae6cfad1b427f3ad888d8

  • SHA512

    1d06bad73640595e4299cabb1dfe313fed4eaf5d7d1613408be2674528150e0bee0c885a8e8b8f7bbd8f95ec800d4c50fafe46a0a01eaa68782e796ef0c258c5

  • SSDEEP

    3072:ZLdLEkfrIwLx3jf6N/MgIWXJF7OSi/mvkUz1RJl8Xn570YAKOMyM2MITIk:/LffMWf6NUMJsmh1DlbMBk

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      ad91fc211aab4094fe471f351d66df4d6b91f1b1577ae6cfad1b427f3ad888d8

    • Size

      393KB

    • MD5

      534d2124cd1edc00c79914c573db3cf8

    • SHA1

      3da089e273d10873c25124ba23c6bdfefb95576f

    • SHA256

      ad91fc211aab4094fe471f351d66df4d6b91f1b1577ae6cfad1b427f3ad888d8

    • SHA512

      1d06bad73640595e4299cabb1dfe313fed4eaf5d7d1613408be2674528150e0bee0c885a8e8b8f7bbd8f95ec800d4c50fafe46a0a01eaa68782e796ef0c258c5

    • SSDEEP

      3072:ZLdLEkfrIwLx3jf6N/MgIWXJF7OSi/mvkUz1RJl8Xn570YAKOMyM2MITIk:/LffMWf6NUMJsmh1DlbMBk

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks