Overview

overview

10

Static

static

3

1693070282...67.exe

windows7-x64

10

1693070282...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    169307028293627766adc97df097a53ebbb57e03bb16a72bb1b54f5ae1be2867

  • Size

    266KB

  • Sample

    240701-n1yx8azemc

  • MD5

    f284dd5e52be29fecddaa61d0315de86

  • SHA1

    292b5ee88bdd7929c4704f319b42792eef80cd03

  • SHA256

    169307028293627766adc97df097a53ebbb57e03bb16a72bb1b54f5ae1be2867

  • SHA512

    d7d3c67255a5a257ab773b577f388451f9411d44187b24025d9170b4decbb7168d95b21facb7404db81c27753692445ae6c7fbcbcdd72aad7388df7cfb74ceec

  • SSDEEP

    6144:i7OwR4FP5uTtYCPCGcJYENSMC1MmZCRJADT:NwmFP7cCGcJfSJAK

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

185.172.128.69
Attributes
  • url_path

    /advdlc.php

Targets

    • Target

      169307028293627766adc97df097a53ebbb57e03bb16a72bb1b54f5ae1be2867

    • Size

      266KB

    • MD5

      f284dd5e52be29fecddaa61d0315de86

    • SHA1

      292b5ee88bdd7929c4704f319b42792eef80cd03

    • SHA256

      169307028293627766adc97df097a53ebbb57e03bb16a72bb1b54f5ae1be2867

    • SHA512

      d7d3c67255a5a257ab773b577f388451f9411d44187b24025d9170b4decbb7168d95b21facb7404db81c27753692445ae6c7fbcbcdd72aad7388df7cfb74ceec

    • SSDEEP

      6144:i7OwR4FP5uTtYCPCGcJYENSMC1MmZCRJADT:NwmFP7cCGcJfSJAK

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks