Overview

overview

10

Static

static

10

3040-55-0x...ry.exe

windows7-x64

3040-55-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3040-55-0x0000000000400000-0x00000000005A8000-memory.dmp

  • Size

    1.7MB

  • MD5

    37bad7e289f1746d56f0bf763a1cc6c3

  • SHA1

    9c14217c97c3378690acf9a002fb9ece976785a8

  • SHA256

    6ab79f7d7cc232b309604e97db5682679a3c2142eaaf17666ca376b481ad8ff6

  • SHA512

    d530e230cabcb3c907ac6fb7aa24000e179af873197927349002ef8be7bfb5a0e0eddcdd3a30368f85113a48fc53d7ecbfba5d348ffec793f6eb73f86c7bb877

  • SSDEEP

    12288:kIIDnrv0/JgRc1SPe1EUMT4a+5jDa4IQKr:grJ4jeT

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3040-55-0x0000000000400000-0x00000000005A8000-memory.dmp
    .exe windows x86


    Headers

    Sections