General

  • Target

    2836-2-0x0000000000400000-0x000000000046A000-memory.dmp

  • Size

    424KB

  • MD5

    f0129d8086ba789a66402647ea8f7e4d

  • SHA1

    8f3b5aee48030f0950e887077969cb8c0c21bcc5

  • SHA256

    21403a1810d4958b7ecb49547713ecf28840f97af3dcb2f4a428a059fc5cdbb1

  • SHA512

    20c7d5300adb518238f6df00cb047680f0ade4925fdce4c1c8f08ebbb822746990d93042d28032d8dd5a6f19e958e97d8e726741ce3536fd39e0fcf5cc2ef381

  • SSDEEP

    6144:7oEKV/I90bqbsFNbmQMbcBt2+ieJBkwAOyMqNcimMYkvVws:7oEKV/rbKsFNbmQMb0EwsM8cimBqws

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.85

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2836-2-0x0000000000400000-0x000000000046A000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections