Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3af35b0cbf0732392ceec0d55c0a5a01d697cf302279b5bddf183d6433aefa80

  • Size

    398KB

  • Sample

    240625-erg4nszcqb

  • MD5

    02d968a1158891c148c99225a81d4f1a

  • SHA1

    710d83ed8df68425899cb8fe761f91e3fc981052

  • SHA256

    3af35b0cbf0732392ceec0d55c0a5a01d697cf302279b5bddf183d6433aefa80

  • SHA512

    2c17caaba043c88162ccf43cab2e1ca25153b2563c34b2b24b1c582243d18ee418f544cddd374a114363f018ad707096e89d756032fe7a9db5ee93e02fe76f49

  • SSDEEP

    6144:UuOO1LVAS+5kHn01b+QuiLYqWPGec3az1Y7ic5i:UPO15AS+5D1b+QuC7mGfKu7i

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      3af35b0cbf0732392ceec0d55c0a5a01d697cf302279b5bddf183d6433aefa80

    • Size

      398KB

    • MD5

      02d968a1158891c148c99225a81d4f1a

    • SHA1

      710d83ed8df68425899cb8fe761f91e3fc981052

    • SHA256

      3af35b0cbf0732392ceec0d55c0a5a01d697cf302279b5bddf183d6433aefa80

    • SHA512

      2c17caaba043c88162ccf43cab2e1ca25153b2563c34b2b24b1c582243d18ee418f544cddd374a114363f018ad707096e89d756032fe7a9db5ee93e02fe76f49

    • SSDEEP

      6144:UuOO1LVAS+5kHn01b+QuiLYqWPGec3az1Y7ic5i:UPO15AS+5D1b+QuC7mGfKu7i

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks