General

  • Target

    928-259-0x0000000000400000-0x0000000001312000-memory.dmp

  • Size

    15.1MB

  • MD5

    57257f0268ad86252235151f8ddc01a3

  • SHA1

    ed68d3b3e5b9f8f41ee3a5db261cde101d3d257f

  • SHA256

    b5fc6c14cee69d8710756599689c562bef48096c601a916725792efd914ad1bf

  • SHA512

    bdcfa78bbd520d528905d0ea0a9df4a1e7ec746b96e5c1d8553f7344598c3f351a488346a92b88bd8fca8dee899140ba643c7d95070bbdbecfcd172d55a14f06

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0/yiLOSfmiUG:S3JNB0JSOw

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 928-259-0x0000000000400000-0x0000000001312000-memory.dmp
    .exe windows x86


    Headers

    Sections