Overview

overview

10

Static

static

10

1940-252-0...ry.exe

windows7-x64

1

1940-252-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1940-252-0x0000000000400000-0x0000000001381000-memory.dmp

  • Size

    15.5MB

  • MD5

    62d17864fc8ada02a857b067354d1a38

  • SHA1

    28c532cd0156374be179241df68291791be18731

  • SHA256

    1f43e37b0225dfa64bb538a505d821bc048b49b4607ed62d242f4eed14fb3b80

  • SHA512

    bc70a18a79027d397890ba54571d52ff99090786fc970f8a059e11c7067189c5f35b2f0d0dc9702a402aabb7bf084842395d0489449475b0de465cf6494505ed

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0RyVLOSfmiKG:S3JNBSMSO+

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1940-252-0x0000000000400000-0x0000000001381000-memory.dmp
    .exe windows x86


    Headers

    Sections