General

  • Target

    2252-3-0x0000000000400000-0x0000000000446000-memory.dmp

  • Size

    280KB

  • MD5

    65478f7479f9be36e6933f1b1053280c

  • SHA1

    614ee7e7f6823a34b2502cbf9a1f2d91b7685380

  • SHA256

    1b9e39f3697edfecd57880b56b30fe28969df5824848b6a55510d32b6d0295f1

  • SHA512

    210e856097c1bea853e707847dcec440b0e6379a6c3458e9a5e394a298fef97e4774864b911f029e442ab34061ab92533be386d0b0f1e8f187c74db88832bd96

  • SSDEEP

    3072:fjJNYb6cSN+tDbI3FUAiJtFej2TUgObqQ/Y8O/tOAg0Fuj0thzeN3ZafvfQAdQou:fjJNYuR0Ifu9TxObYgAOSq5Zan1+Z

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.115

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2252-3-0x0000000000400000-0x0000000000446000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections