General

  • Target

    944-109-0x0000000000400000-0x000000000145F000-memory.dmp

  • Size

    16.4MB

  • MD5

    951d8930e25e32e31e7a4519994ab78c

  • SHA1

    c7a614c00e9c95311b79df355dc715f3b2ddd173

  • SHA256

    82b8e6b7b137aebed5e820fa342a3ccead66989636b886da7fa63104f84b7aa8

  • SHA512

    e11df971b8f6f7cddb7b2e67405dcb8221dbf61446c944a0005396aaa5fa57fad51d2fb798395976c48b5170473036a6db13761324c8f9c07f71cca2c0c012bc

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a04y+LOSfmicG:S3JNBxlSOw

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 944-109-0x0000000000400000-0x000000000145F000-memory.dmp
    .exe windows x86


    Headers

    Sections