Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f64736e29dbb04573850d354c456d36ad69d423fe50b8df1a92e0d45ba1a05c

  • Size

    403KB

  • Sample

    240627-fewxqswaqk

  • MD5

    8991ae992ba4bb0f45ce74796c199e6c

  • SHA1

    01da956bdcef0b29201a47f9325f23f4f38b9642

  • SHA256

    7f64736e29dbb04573850d354c456d36ad69d423fe50b8df1a92e0d45ba1a05c

  • SHA512

    a5f9380d8693fc2940aa9e150dc807be69f095c3cfc0cd4dec74276cbc0a3451884bf05812269bd75742c4e6d52096817b9b4da6d47976926e5913aaa04be6b5

  • SSDEEP

    6144:w9LKLJwUxYZUb4gfN63HCjKvZtbKStqlQMTau:guLJwUxQCVAijOjKStaQMTa

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      7f64736e29dbb04573850d354c456d36ad69d423fe50b8df1a92e0d45ba1a05c

    • Size

      403KB

    • MD5

      8991ae992ba4bb0f45ce74796c199e6c

    • SHA1

      01da956bdcef0b29201a47f9325f23f4f38b9642

    • SHA256

      7f64736e29dbb04573850d354c456d36ad69d423fe50b8df1a92e0d45ba1a05c

    • SHA512

      a5f9380d8693fc2940aa9e150dc807be69f095c3cfc0cd4dec74276cbc0a3451884bf05812269bd75742c4e6d52096817b9b4da6d47976926e5913aaa04be6b5

    • SSDEEP

      6144:w9LKLJwUxYZUb4gfN63HCjKvZtbKStqlQMTau:guLJwUxQCVAijOjKStaQMTa

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks