General

  • Target

    520-100-0x0000000000400000-0x000000000139E000-memory.dmp

  • Size

    15.6MB

  • MD5

    318809b7d2f888e21047e86eaba225c5

  • SHA1

    fd997eb003bd0b8bfe3ec9d5ca3822b1ca10a78c

  • SHA256

    aa1fe25c646131bf033e469f996520c8fcce6f07dacc093089b57b33bc13ec7e

  • SHA512

    cfa19247f69320273c6be99754c797b3c2435a487206c1f8a3e105a64423ce83c1825928eb744bb7194a7b0ddc73c553d5def6e6e07538d38f0910c9d66db090

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0yyBLOSfmiMG:S3JNBXISOk

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 520-100-0x0000000000400000-0x000000000139E000-memory.dmp
    .exe windows x86


    Headers

    Sections