General
- Target 1036-252-0x0000000000400000-0x0000000001397000-memory.dmp
- Size 15.6MB
- Sample230731-wvftfsbc41
- SHA256 fe89ebf7bb28f442a7197d24ac0fcd6a4b5e98cb440ef9881b10a32b064f6554
- MD5 16eb70e5e35dbbcef6dbfa00aa7e12e5
- SHA1 3862be73c9c5c54acd9e2ad1dc46ac10a574f6c4
- SHA512 26c63eaa16ddadc294bfee5afca7d8b55314215e2f09cb2edc4f1ec06de606b2700dd7148b1869e371c76b734ab818ff2eef98307cfb712c6874c62b34337f22
- SSDEEP 12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0sywLOSfmiQG:S3JNBhDSOU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1036-252-0x0000000000400000-0x0000000001397000-memory.exe
Resource
win7-20230712-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1036-252-0x0000000000400000-0x0000000001397000-memory.exe
Resource
win10v2004-20230703-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gcleaner
C2
-
45.12.253.56
-
45.12.253.72
-
45.12.253.98
-
45.12.253.75
Attributes
-
url_path
/default/puk.php
Targets
-
- Target 1036-252-0x0000000000400000-0x0000000001397000-memory.dmp
- Size 15.6MB
- SHA256 fe89ebf7bb28f442a7197d24ac0fcd6a4b5e98cb440ef9881b10a32b064f6554
- MD5 16eb70e5e35dbbcef6dbfa00aa7e12e5
- SHA1 3862be73c9c5c54acd9e2ad1dc46ac10a574f6c4
- SHA512 26c63eaa16ddadc294bfee5afca7d8b55314215e2f09cb2edc4f1ec06de606b2700dd7148b1869e371c76b734ab818ff2eef98307cfb712c6874c62b34337f22
- SSDEEP 12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0sywLOSfmiQG:S3JNBhDSOU
- MD5 SHA1 SHA512 SSDEEP
Score1/10