General

  • Target

    1008-340-0x0000000000400000-0x0000000001312000-memory.dmp

  • Size

    15.1MB

  • MD5

    be30025c77a7e31cfa05ad4d2ba34f79

  • SHA1

    799bb728eeb2a728eb39c50da49cbef8a6d77b40

  • SHA256

    ca80aff79956230e525225e156cf432d40c183d381ca9106d34f6810ba8de916

  • SHA512

    6777c51dd6bee3a175393e7857abe25f3aaa9d70b14bf006f84e4fc73de4474637de15588dc391d6ed258c95950d81814c66958a57ad5549b61022a6f4a01c01

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0lyTLOSfminG:S3JNByGSOB

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1008-340-0x0000000000400000-0x0000000001312000-memory.dmp
    .exe windows x86


    Headers

    Sections