Overview

overview

10

Static

static

10

3044-252-0...ry.exe

windows7-x64

1

3044-252-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3044-252-0x0000000000400000-0x000000000148F000-memory.dmp

  • Size

    16.6MB

  • MD5

    e1b94a101829a589ab7b4212cfc56298

  • SHA1

    378eb9685b07dfd829ce44a53b21b8d107d526d6

  • SHA256

    90c70f56cc93fbd67f7ee2ef92ed02e652ee5c7bb5d5a06cfd625dc01ead0e2f

  • SHA512

    743e3209a3c6b7cb6434b15e5954b315bbde6b195f4dc8f44cd28b2953176805e70139d04e0b406d22dd76e0f18715686c1099c83ca68148672fde688ea40926

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0YyxLOSfmiKG:S3JNBp4SO+

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3044-252-0x0000000000400000-0x000000000148F000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections