Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6ff6934e6fb0aa123b5f3cd3fa94c630b3aa3695f5efdd4a6238aee5c7d3662

  • Size

    403KB

  • Sample

    240627-hblzgazalr

  • MD5

    a043cba1e4fdcdc53ba0af5579fea8a2

  • SHA1

    6c3ade51b33b58d4ae9080ff8db95f7fcc8b633b

  • SHA256

    c6ff6934e6fb0aa123b5f3cd3fa94c630b3aa3695f5efdd4a6238aee5c7d3662

  • SHA512

    8f98162afc394aacc970ee777fbd26389d49d9416bafc6be0ab5ad8e6f385994a80a8eff50fe37fb2af364f33811900f8faffe61c53e8d2d9638cf6c7bd170d2

  • SSDEEP

    6144:BvLL2YV8V+/p7BCNlGEtt1oRtvWoEQMTP:tv2YqV+/p7BavEvWpQMT

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      c6ff6934e6fb0aa123b5f3cd3fa94c630b3aa3695f5efdd4a6238aee5c7d3662

    • Size

      403KB

    • MD5

      a043cba1e4fdcdc53ba0af5579fea8a2

    • SHA1

      6c3ade51b33b58d4ae9080ff8db95f7fcc8b633b

    • SHA256

      c6ff6934e6fb0aa123b5f3cd3fa94c630b3aa3695f5efdd4a6238aee5c7d3662

    • SHA512

      8f98162afc394aacc970ee777fbd26389d49d9416bafc6be0ab5ad8e6f385994a80a8eff50fe37fb2af364f33811900f8faffe61c53e8d2d9638cf6c7bd170d2

    • SSDEEP

      6144:BvLL2YV8V+/p7BCNlGEtt1oRtvWoEQMTP:tv2YqV+/p7BavEvWpQMT

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks