General

  • Target

    2216-250-0x0000000000400000-0x0000000001574000-memory.dmp

  • Size

    17.5MB

  • MD5

    6ad3d33b032b2cd6607941bdc09ea2ab

  • SHA1

    5107cb0f2974219e1a484f6dd14276b63af95ccd

  • SHA256

    d03e0b2aee0720b369a7a31ddb9fc0a00f9aa7b005d226058201f795b01803f3

  • SHA512

    bd4432b2a525c6382e4d5c8f724c677016339372daf5ea4f0fb07a797d73a8ee3bc659073cc383626debd436392aa73d435ea839da06f6f32603d5c184452f3f

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0tyuLOSfmidG:S3JNBqVSOj

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2216-250-0x0000000000400000-0x0000000001574000-memory.dmp
    .exe windows x86


    Headers

    Sections