Overview

overview

10

Static

static

10

2828-251-0...ry.exe

windows7-x64

1

2828-251-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2828-251-0x0000000000400000-0x0000000001381000-memory.dmp

  • Size

    15.5MB

  • MD5

    542b9b08f6d46a9404960ac143e06925

  • SHA1

    c825515a78cb4c4e23d14a0a6f681a735c41c14f

  • SHA256

    d86f2426247dac097bd1b5f2a85578f9091e535981740b1659b2187a2a669e5f

  • SHA512

    fc6dc6c8b62d7b464bb568da5920831db801197c86ebf92b37dda39864bc4169e5c49f9acc93b83778177fd55b59e2b8593264ee24a6d0be811589e8e69783ae

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0MyRLOSfmiKG:S3JNBpYSO+

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2828-251-0x0000000000400000-0x0000000001381000-memory.dmp
    .exe windows x86


    Headers

    Sections