General

  • Target

    2296-251-0x0000000000400000-0x0000000001522000-memory.dmp

  • Size

    17.1MB

  • MD5

    5f674aa79fc6e80b43c916f4267da12c

  • SHA1

    df6f44c0b0505aa3390cca29fce8400411289bff

  • SHA256

    33be11286ac711648c1c00176c45cd695025e76c06feab6190f0a2b61690008d

  • SHA512

    c4eb06d6adbdf2ecca4eea550e6cfc5ac0e6c0df6c1f3e40c667e4afa7c02671cfcd58f8c718e0625085d77be4b505856fc778f60999595a308ce6152104f1da

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0lkyhLOSfmiKG:S3JNBroSO+

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2296-251-0x0000000000400000-0x0000000001522000-memory.dmp
    .exe windows x86


    Headers

    Sections