Overview

overview

10

Static

static

10

2616-341-0...ry.exe

windows7-x64

1

2616-341-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2616-341-0x0000000000400000-0x0000000001579000-memory.dmp

  • Size

    17.5MB

  • MD5

    fe4d5281900ff4eee9b68c292adcb1a0

  • SHA1

    7acea51847994c93d87b5b9ff8cd9b8574b469c9

  • SHA256

    37e2d527f4f4cc4969d31268ea0b1a704f6347559757b262da3a644a2d5e2f90

  • SHA512

    2da831dc747297b6f4d5579223fa4b50f6ffe7f35b54be1ff673e40b3469da77c2f1b3000079f731fcb4bdb000dd189d29f0e69b9961956c5b434e92a5b1c6f2

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0oy9LOSfmibG:S3JNBFUSOp

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2616-341-0x0000000000400000-0x0000000001579000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections