Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb9bf146cf440cc798d5b923027847b9393bc3f9514c9be3acb7440667ee329f

  • Size

    246KB

  • Sample

    240626-fpfnhawfrc

  • MD5

    26b6823c975ace400ea3e12bbcaaf97e

  • SHA1

    8c3834300a3fadb76877207654f0234f988fad8b

  • SHA256

    fb9bf146cf440cc798d5b923027847b9393bc3f9514c9be3acb7440667ee329f

  • SHA512

    634f2f02cba2cb09b7087583a2503aa433d4bd783dc2467024679c71666cd49079457ab4e7c6bd44686838c512b3212716ca81a5ba4e7b3a943a0c0efd5545f2

  • SSDEEP

    3072:KI5tu+QhylbwzgLJnNwGEAG77wkfKwmfZtLZjmHU0idxes+KiewQJ:KIq+QMkuw4rtdx

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      fb9bf146cf440cc798d5b923027847b9393bc3f9514c9be3acb7440667ee329f

    • Size

      246KB

    • MD5

      26b6823c975ace400ea3e12bbcaaf97e

    • SHA1

      8c3834300a3fadb76877207654f0234f988fad8b

    • SHA256

      fb9bf146cf440cc798d5b923027847b9393bc3f9514c9be3acb7440667ee329f

    • SHA512

      634f2f02cba2cb09b7087583a2503aa433d4bd783dc2467024679c71666cd49079457ab4e7c6bd44686838c512b3212716ca81a5ba4e7b3a943a0c0efd5545f2

    • SSDEEP

      3072:KI5tu+QhylbwzgLJnNwGEAG77wkfKwmfZtLZjmHU0idxes+KiewQJ:KIq+QMkuw4rtdx

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks