Overview

overview

10

Static

static

10

1320-104-0...ry.exe

windows7-x64

1

1320-104-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1320-104-0x0000000000400000-0x0000000001598000-memory.dmp

  • Size

    17.6MB

  • MD5

    77fb451fadc5cc43fab4124bc10d5573

  • SHA1

    107180da8efc163fb6c5a0abdcbf4dc67f959a72

  • SHA256

    a7357e314e8f9a878280d5d3b81d596a7d24954e3f4cdafe53e87acec4820447

  • SHA512

    daf8379222342eb26f11f3b3bda9b08fc7bf5cad4ef3ebf4bca51beacc5a3f9c0626c5ed368d8378ca148f01578e03bcde4cdbfc9abe279078c4760285324258

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0LyELOSfmiQG:S3JNB0HSOM

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1320-104-0x0000000000400000-0x0000000001598000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections