Overview

overview

10

Static

static

10

784-63-0x0...ry.exe

windows7-x64

784-63-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    784-63-0x0000000000400000-0x000000000045A000-memory.dmp

  • Size

    360KB

  • MD5

    64261bd6aa87dec1939e15fca2c7dd9f

  • SHA1

    238c724f0c1219aab93bf619b099c87cc0665d47

  • SHA256

    d94d0acfb0b5ac1b1d79b52bdc0ec8c523919c33e193cb6f26a0ebc2697a44ad

  • SHA512

    9cfcbde2f0c9b6d7223d70188313b0413fa295f2ae0763b3be06ac4e1881af780bb5235c1909826d06e1f84e85a6e801f4bc25366d76c3fd13d7a9aee97a9f0f

  • SSDEEP

    3072:9vpJ+GHNITkHufJkk7UNI14lDx0W+YAIEoI54cR2OR2YbNB5XA4EOxHerVbKjCGs:9eGEkjbl/g+L5xK9bM02DN

Score
10/10
gurcu

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot5948365373:AAHGoShKq2YoPLHuMrakRbVNthbMABFYHUc/sendMessage?chat_id=-1001620069625

Signatures

  • Gurcu family
    gurcu
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 784-63-0x0000000000400000-0x000000000045A000-memory.dmp
    .exe windows x86


    Headers

    Sections