Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58d0026410046114d7f239f2e82bb26251a6bed96ac98a3d89d3b88e0d67f48d

  • Size

    246KB

  • Sample

    240626-xwdk6a1frm

  • MD5

    06da4f2ff17d452e476c792e51ce750b

  • SHA1

    99fc4fa3196a07965823739ca70c5430a7270873

  • SHA256

    58d0026410046114d7f239f2e82bb26251a6bed96ac98a3d89d3b88e0d67f48d

  • SHA512

    f14ee079f165cec97bc7a93807040aceeafc6ecd16016a38c8aa73097bbf1d9cc2c78b8f80c707c8a3ad2ad67f2169858587100d83e02749b97b7332281cce0a

  • SSDEEP

    6144:KV2WyQlHXz2IYDyKsIdQu6go2Kt2vGJvMD:KV2WyQl3mxslu69l2+ZMD

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      58d0026410046114d7f239f2e82bb26251a6bed96ac98a3d89d3b88e0d67f48d

    • Size

      246KB

    • MD5

      06da4f2ff17d452e476c792e51ce750b

    • SHA1

      99fc4fa3196a07965823739ca70c5430a7270873

    • SHA256

      58d0026410046114d7f239f2e82bb26251a6bed96ac98a3d89d3b88e0d67f48d

    • SHA512

      f14ee079f165cec97bc7a93807040aceeafc6ecd16016a38c8aa73097bbf1d9cc2c78b8f80c707c8a3ad2ad67f2169858587100d83e02749b97b7332281cce0a

    • SSDEEP

      6144:KV2WyQlHXz2IYDyKsIdQu6go2Kt2vGJvMD:KV2WyQl3mxslu69l2+ZMD

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks