Overview

overview

10

Static

static

10

5056-140-0...ry.exe

windows7-x64

5056-140-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5056-140-0x0000000000400000-0x000000000045A000-memory.dmp

  • Size

    360KB

  • MD5

    bb03ca5f7ad7145f98b2647e332a1b10

  • SHA1

    b3b3176c908bde67ea4247fb31ca29c6fa7df3ec

  • SHA256

    7a3ec68db66e291e36155d3cad3e6444a940569f8b6a8fb1063408be6e8d940a

  • SHA512

    38f4164767b380943da1bd92c04ef7400aceee96db1f6c170644f3c92bf00dbba6b853924b98e329aff25b1b179ffac0d400292781d300a775861fcfef68ec59

  • SSDEEP

    3072:9vpJ+GHNITkHufJkk7UNI14lDx0W+YAIEoI54cR2OR2YbNB5XA4EOxHerVbKjCGC:9eGEkjbl/g+L5xK9bM02DN

Score
10/10
gurcu

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot5948365373:AAHGoShKq2YoPLHuMrakRbVNthbMABFYHUc/sendMessage?chat_id=-1001620069625

Signatures

  • Gurcu family
    gurcu
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5056-140-0x0000000000400000-0x000000000045A000-memory.dmp
    .exe windows x86


    Headers

    Sections