Overview

overview

10

Static

static

10

2804-55-0x...ry.exe

windows7-x64

2804-55-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2804-55-0x0000000000400000-0x00000000004FB000-memory.dmp

  • Size

    1004KB

  • MD5

    2af5c866167e09bf17377b408d751bfe

  • SHA1

    26b59e1a6547fd54327bfdba2d3b2dd0ddc22cab

  • SHA256

    31175988288c9b1f8690a3d11f352917d4142feab0405eb04895fec3ec959de4

  • SHA512

    41965012e27a83960149ca921dbe5535d4b8a08865d5a8bc7b6bd2f0dcdc4e616ecc4fb0d661abb1fa3e3f7e1e23a703ac168c8db1a83d84842e824df1cb792b

  • SSDEEP

    12288:kIIDnrv0/JgRc1SPe1EUMT4a+5jDadUQKI:grJ4jeo

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2804-55-0x0000000000400000-0x00000000004FB000-memory.dmp
    .exe windows x86


    Headers

    Sections