General

  • Target

    700-108-0x0000000000400000-0x000000000142D000-memory.dmp

  • Size

    16.2MB

  • MD5

    ce257300df06190e92ef6f197c34d2e8

  • SHA1

    f4e64c1e2b74a4d8c4f2e1120435dcf0b76d36ae

  • SHA256

    9291e0d8974b964092d5e2905b4a4c54e779ed961cbc84fe7968554fc89dc49e

  • SHA512

    a6e601cf48d9d47051c06359fe39aef0ca9414f5a20bf1a264720db5477aca7232c9efa8842797d6536c5bef3c3dbceba3b20e9fe463188da7df9254d115537b

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0qy/LOSfmimG:S3JNB/SSO6

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 700-108-0x0000000000400000-0x000000000142D000-memory.dmp
    .exe windows x86


    Headers

    Sections