Overview

overview

10

Static

static

10

2748-258-0...ry.exe

windows7-x64

1

2748-258-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2748-258-0x0000000000400000-0x0000000001314000-memory.dmp

  • Size

    15.1MB

  • MD5

    b9e4c892e512ac5788b2a9b7bc5efcd4

  • SHA1

    1b3f5ee9dc5df11333f7cc56f9c3e6ffb730f084

  • SHA256

    e1cbfcd618c694331700efe937e0f65ae89677971049ccc15385753106505aaf

  • SHA512

    fb0cd3d4bfe6e64a42157653454f9087f20378b3cd417c05c8b11c0b8fa5d9e5f7cf33fba8b35f266f304d6e428e9b11fa4a188f8b96ef867f4dfee37baeb07b

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0Fy7LOSfmieG:S3JNB6OSOK

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2748-258-0x0000000000400000-0x0000000001314000-memory.dmp
    .exe windows x86


    Headers

    Sections