General

  • Target

    340-108-0x0000000000400000-0x000000000142F000-memory.dmp

  • Size

    16.2MB

  • MD5

    5cb998e85deb5f1b20a988e82befe566

  • SHA1

    df5fd3322fecc9884ce681439726d201dffbe346

  • SHA256

    e876eaf8a986dfd91b888047990dedf6077f562b01be94cfda6f7be952480fa3

  • SHA512

    8da2b7a9788939e8f3bc7a311da840e9692faefe42c02721a0b9f76bbdde727444e5148898eac15fab48a21d4f7e83f77fadb813ea95c50accf6a5b711f9102c

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0uyfLOSfmiWG:S3JNBvySOG

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 340-108-0x0000000000400000-0x000000000142F000-memory.dmp
    .exe windows x86


    Headers

    Sections