Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

  • Size

    396KB

  • Sample

    240625-tpblfasgnk

  • MD5

    8a21a59fc5ff1ca674a0ab50b7bc102c

  • SHA1

    2858c55d923ae0273c5fd60aa30a4d64a71267af

  • SHA256

    28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

  • SHA512

    a11e0285cd26de484bbcadc87c650d45ed003bd5deaba5485e9d1ada6213e6b8ba12b8e3d64877d6a5ef0b9a9f798fc45cb352931d26fc835a5c3aba90424138

  • SSDEEP

    6144:uvLLMUbBN2tQ1W3q6Dh16gA92gm657HPWIVOa98kI/N3:IvMe6tQYDCBwgm60gOMiN

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

    • Size

      396KB

    • MD5

      8a21a59fc5ff1ca674a0ab50b7bc102c

    • SHA1

      2858c55d923ae0273c5fd60aa30a4d64a71267af

    • SHA256

      28d85dc6226236f69b400bf94995744aac6d3fc45bb5fb29377a00ecee11b35c

    • SHA512

      a11e0285cd26de484bbcadc87c650d45ed003bd5deaba5485e9d1ada6213e6b8ba12b8e3d64877d6a5ef0b9a9f798fc45cb352931d26fc835a5c3aba90424138

    • SSDEEP

      6144:uvLLMUbBN2tQ1W3q6Dh16gA92gm657HPWIVOa98kI/N3:IvMe6tQYDCBwgm60gOMiN

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks