Overview

overview

10

Static

static

10

1320-99-0x...ry.exe

windows7-x64

1

1320-99-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1320-99-0x0000000000400000-0x0000000001383000-memory.dmp

  • Size

    15.5MB

  • MD5

    7e5e37d79c5fa92d48761cb1ae2ecd5e

  • SHA1

    db8fe2a1f0034a64f9c24ee72e2c95da843acf39

  • SHA256

    6df77f72b1228b49cf8f3116aedd5eba099b515bbd8f7b4b1d505999fd53d818

  • SHA512

    d7812e4d1808027c105dd2fc4d6fd0b7eec09e9ed2043470041134c7e3051e388857c3d9e99453ca4cd2fec2c7ba52de72b291a92c0de1cfd62a4ab841b05ff0

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0uydLOSfmiKG:S3JNBT0SOu

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1320-99-0x0000000000400000-0x0000000001383000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections