Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

  • Size

    399KB

  • Sample

    240627-prp5dstfrl

  • MD5

    630a16099e944d9740c672590549a7e3

  • SHA1

    5dcc487e71e9dfaee1eddbb603a438388f42d39b

  • SHA256

    011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

  • SHA512

    6ec9591446653976343f5da828771bb705bc0d510baa904ac803f7a84d4811e6c38295e5afe536cb5f144c380459ad66f6e366a7b9c3d745e7ccef7ee1fa6855

  • SSDEEP

    6144:LqLEr1UPIfL2jQNevRCZI+wTjrHhcew78qQMT573WT:ugJUQq0NIRqhwTjrHhc98qQMT

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Targets

    • Target

      011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

    • Size

      399KB

    • MD5

      630a16099e944d9740c672590549a7e3

    • SHA1

      5dcc487e71e9dfaee1eddbb603a438388f42d39b

    • SHA256

      011228117e8f14c8cf6b93264adb874773bc1ca11fed8a808a8addf94554f77d

    • SHA512

      6ec9591446653976343f5da828771bb705bc0d510baa904ac803f7a84d4811e6c38295e5afe536cb5f144c380459ad66f6e366a7b9c3d745e7ccef7ee1fa6855

    • SSDEEP

      6144:LqLEr1UPIfL2jQNevRCZI+wTjrHhcew78qQMT573WT:ugJUQq0NIRqhwTjrHhc98qQMT

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks