Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b8b83affbf3b084d6686b405d647bec9f45e215239d12bff136c4a2ca45db24

  • Size

    277KB

  • Sample

    240706-v2j9sayhlb

  • MD5

    2525f9a6d5eb7477b7267cf5632e908c

  • SHA1

    725fe4c04a3029ed8d9f77687a46f4cbd8993fc8

  • SHA256

    4b8b83affbf3b084d6686b405d647bec9f45e215239d12bff136c4a2ca45db24

  • SHA512

    df338e9265656cb4c0d01194d194e26f566eeea855a3a1027c545d1ea800226904b986bdc0316ae8d089b0f71ba251809238453ac26034d7b7bbdd95712e89df

  • SSDEEP

    6144:EUrwjj44tgFgjSzzE8utEVU8u8xiTaoWky4jlxDW:EDjhtv4P6EVUT3h

Score
10/10
gcleanerloader

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

77.105.160.30

185.172.128.69

Targets

    • Target

      4b8b83affbf3b084d6686b405d647bec9f45e215239d12bff136c4a2ca45db24

    • Size

      277KB

    • MD5

      2525f9a6d5eb7477b7267cf5632e908c

    • SHA1

      725fe4c04a3029ed8d9f77687a46f4cbd8993fc8

    • SHA256

      4b8b83affbf3b084d6686b405d647bec9f45e215239d12bff136c4a2ca45db24

    • SHA512

      df338e9265656cb4c0d01194d194e26f566eeea855a3a1027c545d1ea800226904b986bdc0316ae8d089b0f71ba251809238453ac26034d7b7bbdd95712e89df

    • SSDEEP

      6144:EUrwjj44tgFgjSzzE8utEVU8u8xiTaoWky4jlxDW:EDjhtv4P6EVUT3h

    Score
    10/10
    gcleanerloader

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

      loadergcleaner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks