Overview

overview

10

Static

static

10

1116-252-0...ry.exe

windows7-x64

1

1116-252-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1116-252-0x0000000000400000-0x00000000014C1000-memory.dmp

  • Size

    16.8MB

  • MD5

    188bae0cb8ac1b1c41ba11740fd540aa

  • SHA1

    e929ca55bb7819f903860dfdfe33796f46cadd29

  • SHA256

    b67a2f7e2d55e5488eb19ec8b659cb3eac21e22721dc5ef0ca4615afcaaa580c

  • SHA512

    1d451b7a5c0d428f6ef074b0ffa5d950f9c65f8a662be364f5aeb042e39c1ebbe41053c660e1d9389db0549486f0313c7578c12ebaafdf5ef0a6bf4c38d8ea6d

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a03yZLOSfmiKG:S3JNBYgSO+

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1116-252-0x0000000000400000-0x00000000014C1000-memory.dmp
    .exe windows x86


    Headers

    Sections