General

  • Target

    3012-187-0x00000000002D0000-0x000000000030F000-memory.dmp

  • Size

    252KB

  • MD5

    885c4187bccc3f98aae22d85ab35e3e1

  • SHA1

    71ea491bf44dc946c9b8b7ded5ed337cd3b99146

  • SHA256

    97ea90f50c3165aa260e98c0049726391be6f692bc4a52b2d2fbbf9a0a3a06d6

  • SHA512

    b184be1509b9af8df53f52b5816c2cd61d437f29188a00a10aafe99cdd98490b08af257d6dc4c9e1dced23d3604adde228da5cb7c091c2b648c121e332475a8c

  • SSDEEP

    6144:5KMOAd7IF9Zr3Tz5s1BOzCtUy020kkj2ppKAO8LJi/Z:0MOAd7IbZr3Tz58BOzObKYOZ

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

37.0.8.39

31.210.20.149

212.192.241.16

Attributes
  • url_path

    /software.php

    /software.php

Signatures

Files

  • 3012-187-0x00000000002D0000-0x000000000030F000-memory.dmp