GCleaner

Malware Family

8 687 indicators of compromise attributed to GCleaner across abuse.ch threat intelligence feeds.

Domains

1

IPs

3

URLs

37

Hashes

8 646

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
gcl-page.bizdomain
91.92.241.242ip
158.94.209.95ip
195.24.237.47ip
http://45.12.253.74/pineapple.phpurl
http://91.92.241.242/dllurl
http://158.94.209.95/successurl
http://91.92.242.236/serviceurl
http://onlinehueplet.com/77_1.exeurl
http://158.94.209.95/goodurl
http://194.145.227.161/partner.phpurl
http://91.92.242.236/dllurl
http://45.9.20.13/partner/loot.phpurl
http://appwebstat.biz/stats/1.phpurl
http://194.145.227.161/dlc/sharing.phpurl
http://91.92.242.236/success?substr=mixfive&s=three&sub=nnurl
http://158.94.209.95/contenturl
http://45.12.253.56/advertisting/plus.phpurl
http://37.0.8.39/access.phpurl
http://158.94.209.95/infourl
http://91.92.241.242/infourl
http://212.192.246.217/access.phpurl
http://appwebstat.biz/connectionurl
http://cleaner-partners.ltd/check.phpurl
766f2032f0d8527d5867efe920679916125dc643c0205d8b4ce0853665f0b13dhash
32b76801aebcedf52e1ef05d2c3c5ce26b21204a521bcbbe0e218012cefd3a4bhash
8824e30d30d8fab7fcf552615c27d9098ee51bcfa83d86504014aa57545b5d06hash
84fcbfa7957515c3c9922ee864eea12f4d054649f2d301a0b5c671cf10a505f9hash
e1a0f8098ce04026e095b7245dc5554a792024c969db7b1a264dbebbdbe210e2hash
c920e82d1a56b26205e4f8956edadce709403ba044b608d0ff35690882ba2376hash
21f4648455f88cae61ae6435b1d4f50cebd4d8037f7cf0b16145e96b8c152f5bhash
dacb85c98dd51e073c0a7b0b42f3815231a477494c1e636d5b76a4fced11fb01hash
a04d14a210ce21a059eb25573c1210491b2dcbb732621d7243a9d76370a701bahash
0ec584f0565c38a70c9c560a7730cc54f4be565f725e837effe747d80cdc51e4hash
eb32c924369c37a54f820c7b0e71b839754302c0edf8722154318c9bcc7e74f3hash
fd7cf3b6831247f15f70b4e38db8003cac2eb3713c5d7608472db4ab7547791ehash
86427d704ea544bb0be54e76000557a0e270d22f14e91df1a900976968e5de75hash
ec1a2a57221452e1bec10e19afe13c7ca041cad77087b0f7260ed945ccb933b5hash
ce6f1408e4ab5b88ccdf46f4820ea0366f5b2d9a54c9061d5e7ce150ad3e1d76hash
270c236987f41b0a2f5e4ad10e0e4effc67514ce10862b19f7dcf2b58ce3add1hash
f82b97d8adb76fe9c5ff0ae6b649893721a3b213c3215a8383607e62d4692db7hash
a2920217eeae4b1c17f47dc1e09d2ab7e0d45d08c145260a2ed2aa351e0f4066hash
51fe8468ab18932161d0e211f2217712b2340a5e701e9755f5072a61fb2f2a11hash
0c0e5e91675463f212561ef25be47926e72d2f429c6aeb015ad414c6645c85d2hash