Skip to main content

GCleaner

Malware Family

8 754 indicators of compromise attributed to GCleaner across abuse.ch threat intelligence feeds.

Domains

1

IPs

4

URLs

37

Hashes

8 712

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
gcl-page.bizdomain
91.92.241.242ip
158.94.209.95ip
195.24.237.47ip
91.240.118.10ip
http://45.12.253.74/pineapple.phpurl
http://158.94.209.95/goodurl
http://91.92.241.242/infourl
http://hsiens.xyz/addInstall.phpurl
http://158.94.209.95/contenturl
http://cleaner-partners.ltd/check.phpurl
http://45.12.253.72/default/puk.phpurl
http://appwebstat.biz/stats/1.phpurl
http://91.92.242.236/infourl
http://45.12.253.75/dll.phpurl
http://194.145.227.161/partner.phpurl
http://91.92.241.242/serviceurl
http://158.94.209.95/updateurl
http://91.92.242.236/success?substr=mixfive&s=three&sub=nnurl
http://158.94.209.95/serviceurl
http://91.92.242.236/updateurl
http://cleaner-partners.ltd/stats/save.phpurl
http://158.94.209.95/dllurl
http://158.94.209.95/successurl
http://the-flash-man.com/Installer_HwtcxtRp5S8kqr2V9ysBB7Utrt/UltraMediaBurner.exeurl
d9956134a67e5236fa4a302a9dccbc01e2e17986dd33c73cb36dc1a753597751hash
0553f25eaee197a1da865d4b887eb1a59396a65c9632d3cb6ca664027920a502hash
a04d14a210ce21a059eb25573c1210491b2dcbb732621d7243a9d76370a701bahash
d25b29fd1afc237962c4735521190b0df521a40da60e669ef417a864dfba46echash
9cfdc5f11ab2c97fd116b930b1e20d51ecb607efdbbb106811bdfb3288a0b82ahash
4c7375b07cbaab06c06c1b01601d854c9e26e872d4209cdf3704290bcad18ec7hash
fbd4a53ff25b3ce3873554da5ac990a3be12ea699ea064c093a9b69534b04c65hash
32be3ccbd44f3eed0b74fdbbf9d523e3d820586a6735592d5377bd29e82c1b3ehash
25a2a5069c502b7aafebbdf26a2d80225774f39f537f2d1b03e3099300d6b3f9hash
38021cd20106e22c6c9ce3bb8d6d3f350b66f247ebae9fd5a4b826b4e1da4ac3hash
5139de19309ffe544e92c535f651440a1d43bb9bc1c45f5dbb4a3a763f6b6017hash
a34d0fdeea7adfbeac5dfb025c2ebf21b19c55d290c72f5705a7e3b331c41638hash
096fc0411b24c96ac6c77cce846fc716a4150aa3a392a3f372ee842773adf530hash
0607c6156c18eaca7b18c5619c2b472de885562c55a7727ac163e5978e38d198hash
a7790393710532223b7a1ec48034e0e50a72d5cae2b93bdd6197f78b96184ea8hash
b2b9c192ea0972d8304e15eec3806e9e6e959446127405101487e7b25c759329hash
83871106a8d3212497183db453ad0ababe3df6f23f2ac46a6cf7c569e7cff1ffhash
6030d27ec9229c5211dfa3ebb91981cee067c00f3a53d42c9f9dcf86c335cab7hash
b4c9e35a4a2cf3bcf13e21faeb0e3d25a4fbbf1c0db0a4c22ae537b99bd49f9fhash
d5e7de2fd5987b8356f29d011cd95ea37875a697120c59387db4d995cf5ed929hash

Another file to check? Run a file hash reputation check.