Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d9d3a2475130acac4c93c053b598152607f43ab3f8278d24f9baf72dd5e7d72

  • Size

    287KB

  • Sample

    240706-nz75hayajj

  • MD5

    6567e8f03d6943510e84981f676840e9

  • SHA1

    8bcd68e58ec2179a5b1d1e25d9a8312e02227f77

  • SHA256

    1d9d3a2475130acac4c93c053b598152607f43ab3f8278d24f9baf72dd5e7d72

  • SHA512

    b3ed7b7f36d38f2abe2581eeda24f4f514bb4b22ddd5a2ad2b2e3dab65107c4534d7f746db664926ac9638a6b235f540ab893022d55c36fc65af3fe9c5680c12

  • SSDEEP

    6144:4X196z7NHgOdDZLLtQrrzpJw6ajvhO2eEbHkW:4X19y7qeNLEzpCdjvSE

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Targets

    • Target

      1d9d3a2475130acac4c93c053b598152607f43ab3f8278d24f9baf72dd5e7d72

    • Size

      287KB

    • MD5

      6567e8f03d6943510e84981f676840e9

    • SHA1

      8bcd68e58ec2179a5b1d1e25d9a8312e02227f77

    • SHA256

      1d9d3a2475130acac4c93c053b598152607f43ab3f8278d24f9baf72dd5e7d72

    • SHA512

      b3ed7b7f36d38f2abe2581eeda24f4f514bb4b22ddd5a2ad2b2e3dab65107c4534d7f746db664926ac9638a6b235f540ab893022d55c36fc65af3fe9c5680c12

    • SSDEEP

      6144:4X196z7NHgOdDZLLtQrrzpJw6ajvhO2eEbHkW:4X19y7qeNLEzpCdjvSE

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks