General

  • Target

    4116-339-0x0000000000400000-0x0000000001318000-memory.dmp

  • Size

    15.1MB

  • MD5

    9da61991969b268165ff72837891b2d2

  • SHA1

    33f3dac0571d9f5fe8ea0abfaed3572276077963

  • SHA256

    c6f06bbc522cc0a363f93878665f52e13c149d21b73126f501f99558a89560cf

  • SHA512

    aaa97917bef1d07c99870470b187dff192bca28a0f0a65dec3ab1b7b1e3802d2210659414c026b13e156204a9626008598bc5a7113cda2986e58fdd60c390c3f

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0AytLOSfmiBG:S3JNBtESOn

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4116-339-0x0000000000400000-0x0000000001318000-memory.dmp
    .exe windows x86


    Headers

    Sections