General

  • Target

    1696-74-0x0000000000400000-0x00000000013DC000-memory.dmp

  • Size

    15.9MB

  • MD5

    e42641658fcba3ce684ad6e52b47c767

  • SHA1

    a040a098683490b1bfb188f6707a0b54d1204ef0

  • SHA256

    3244bb078df37aeba6f286d043538d90858f45aa6e0ea795bd8caa9989751403

  • SHA512

    7df30a98cd0c7785763b79ee22d4be1d16eb93691a5a70d5e5320389186fc72bb1b054992a9a2b813d5dbf4402ca51fbb034a73feb3f7cd949f188168546fdee

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0KIyXLOSfmiTG:S3JNBwLqSOV

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

Files

  • 1696-74-0x0000000000400000-0x00000000013DC000-memory.dmp
    .exe windows x86


    Headers

    Sections