Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f8c18b10559889b3bc38a6e805e30783c573e62d4da34836c4a8d8ebb02f0bb

  • Size

    288KB

  • Sample

    240706-ft3zlayflb

  • MD5

    ade64a6701f9f34f04644f4ba657908f

  • SHA1

    e6f2fc91c87444fcfee3095802f75ea51200b037

  • SHA256

    2f8c18b10559889b3bc38a6e805e30783c573e62d4da34836c4a8d8ebb02f0bb

  • SHA512

    0c2c57010dd94a81510008e1d0534d705a3200e6795608e07010ca8002f3fa8c8e893081aa58cb4bfed0420a39db9990a3a3897f5a0fd5967a242df0c36cafa7

  • SSDEEP

    3072:S3tXIniCsbT35mTjxvjwq6pjSLOs/fHny9FZeCkJwd1LDxgDrWHVsy4iIT:ShIniCsbToJv+1SJ/fHy9nkw1guHVW

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Targets

    • Target

      2f8c18b10559889b3bc38a6e805e30783c573e62d4da34836c4a8d8ebb02f0bb

    • Size

      288KB

    • MD5

      ade64a6701f9f34f04644f4ba657908f

    • SHA1

      e6f2fc91c87444fcfee3095802f75ea51200b037

    • SHA256

      2f8c18b10559889b3bc38a6e805e30783c573e62d4da34836c4a8d8ebb02f0bb

    • SHA512

      0c2c57010dd94a81510008e1d0534d705a3200e6795608e07010ca8002f3fa8c8e893081aa58cb4bfed0420a39db9990a3a3897f5a0fd5967a242df0c36cafa7

    • SSDEEP

      3072:S3tXIniCsbT35mTjxvjwq6pjSLOs/fHny9FZeCkJwd1LDxgDrWHVsy4iIT:ShIniCsbToJv+1SJ/fHy9nkw1guHVW

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks