Overview

overview

10

Static

static

10

3300-326-0...ry.exe

windows7-x64

1

3300-326-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3300-326-0x0000000000400000-0x000000000148F000-memory.dmp

  • Size

    16.6MB

  • MD5

    a8d7a35bef7846ca4f669b93771f95a5

  • SHA1

    7985de7ba7e18517b28297a5a611e9c142c81000

  • SHA256

    70d08ee6fa092c92d13df8169a519b0477459685cd4f020c46c3ce8f1669428e

  • SHA512

    78a2f1556d6332779a340d08b2f342fbcbd4489c04b6cd96c9b993a7516cfee31dd1228693dea0331bf3a384f380e7bee099e84d122cd8e231a7a5b4403947c0

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a0WypLOSfmiMG:S3JNBjwSOo

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75
Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3300-326-0x0000000000400000-0x000000000148F000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections