General

  • Target

    1972-57-0x0000000000400000-0x00000000005AD000-memory.dmp

  • Size

    1.7MB

  • MD5

    28dece2168471705243c0020f26acf95

  • SHA1

    c0c5e5e4087d45e16c0ab0740408726fc9a59e79

  • SHA256

    297ab25ba1614d8fe2f1aabe7976b489da3d46a45da7bd6594d86137b98b4ce5

  • SHA512

    318886a058621ac089ba68640537fe9db756dba69ab259dc3381f001678e309291e786a702b954210de2000136af70aa2cf76abfee562099582dcd18358c74cb

  • SSDEEP

    12288:kIIDnrv0/JgRc1SPe1EUMT4a+5jDaxeQKOP:grJ4jemOP

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1972-57-0x0000000000400000-0x00000000005AD000-memory.dmp
    .exe windows x86


    Headers

    Sections