Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec2fb6e4e92ad34db22ccb2596d2c3c5d457df17819c36c5b7b4b92985a8639c

  • Size

    260KB

  • Sample

    240705-trpabatfme

  • MD5

    69e88fdb30fc2460d3bc10eb69f73c5b

  • SHA1

    680269a6bd246cf35dd48e150698359a3672da87

  • SHA256

    ec2fb6e4e92ad34db22ccb2596d2c3c5d457df17819c36c5b7b4b92985a8639c

  • SHA512

    8a35482a3eb5a6aac887958e25a2e63f911ade4d813df953ad2fb5c3fe7cf0d5d543135c9de65776736e3ea82ee5815fa108c9d42c6a54b9e20a77f236385202

  • SSDEEP

    6144:k0vAMiXurGlDP5HwvP6HWmGtuDsrrhdLT7:k0vA3hlDBHweGgDC

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Targets

    • Target

      ec2fb6e4e92ad34db22ccb2596d2c3c5d457df17819c36c5b7b4b92985a8639c

    • Size

      260KB

    • MD5

      69e88fdb30fc2460d3bc10eb69f73c5b

    • SHA1

      680269a6bd246cf35dd48e150698359a3672da87

    • SHA256

      ec2fb6e4e92ad34db22ccb2596d2c3c5d457df17819c36c5b7b4b92985a8639c

    • SHA512

      8a35482a3eb5a6aac887958e25a2e63f911ade4d813df953ad2fb5c3fe7cf0d5d543135c9de65776736e3ea82ee5815fa108c9d42c6a54b9e20a77f236385202

    • SSDEEP

      6144:k0vAMiXurGlDP5HwvP6HWmGtuDsrrhdLT7:k0vA3hlDBHweGgDC

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks