Overview

overview

10

Static

static

10

592-99-0x0...ry.exe

windows7-x64

1

592-99-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    592-99-0x0000000000400000-0x0000000001559000-memory.dmp

  • Size

    17.3MB

  • MD5

    6dc0483927feaf2819bc12d78f6c8b1d

  • SHA1

    de3f85486d99f6b5a2b325c7de19b2cabcc0797a

  • SHA256

    0a2f048541be71ac5f12f75498e15f4ff6791f366166a49ec90ea2ce947b0b31

  • SHA512

    96ddf52aa672987c35fcd127fe5facf783e593dfed537f3284568b38042da095c5a14f1c211619f47c76047c441cc11b8ef5116b7e2dddda5c86ffc30ddef017

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a08yiLOSfmitG:S3JNBZJSO/

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 592-99-0x0000000000400000-0x0000000001559000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections