General

  • Target

    940-109-0x0000000000400000-0x000000000146F000-memory.dmp

  • Size

    16.4MB

  • MD5

    5d1d7c21176b1b2f3e21e1e0153aa2fd

  • SHA1

    2d195eedfdc3ab0cafb9eb47619233c9b515922f

  • SHA256

    c0341cc3ae9615b72c844d2dcdeca955555ab3ac59bff03c1e3e5f6cb2c77c8a

  • SHA512

    b69ee5e9c6654d885751f5fddc645e4d220443c8dbea3a98938af2f9d38ad80503e9b7d866f3bcf5ba14f1d63098d0221be4631812d9f89264764234cac98ed8

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0DyiLOSfmioG:S3JNBUJSOo

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 940-109-0x0000000000400000-0x000000000146F000-memory.dmp
    .exe windows x86


    Headers

    Sections