Overview

overview

10

Static

static

10

4988-173-0...ry.exe

windows7-x64

4988-173-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4988-173-0x0000000000400000-0x0000000002BED000-memory.dmp

  • Size

    39.9MB

  • MD5

    3397504c6b352120e8a163a62e5efae0

  • SHA1

    8617b76f687650373f1bde8b62da398744f34bc4

  • SHA256

    d2a1d3b1ae34efee5619447224fd749a79a79172e4b44aa656d31551d75e902b

  • SHA512

    1593d1bb213172c94d80a55243650b9801b5a15e849b37f3591a447f96d2d7304ee09e401d6c45f415886a52044fa0bcc3f44f949cc0e868fd3af539fd28dca2

  • SSDEEP

    12288:6NTEpCcY05LKt8xQTSW3l5AbKH3ElwNrc:FNRpxQx3l5AbKH3UP

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.115

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4988-173-0x0000000000400000-0x0000000002BED000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections