Overview

overview

10

Static

static

10

3020-3-0x0...ry.exe

windows7-x64

1

3020-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3020-3-0x0000000000400000-0x000000000048C000-memory.dmp

  • Size

    560KB

  • MD5

    e0207ed87106544fec2d50df28444e02

  • SHA1

    7d866b5f4ee4f15ddcde58df03eee85494994f90

  • SHA256

    5b9a82071b87d6e0a43b3dd3445559670825aba69340ca3796e31ea9d70f43f7

  • SHA512

    a3960587f9d0fad551a05cdb21e096f3816e9994ba3f886f7b1da3708f5cc66ad2444cfffa3b996e7cd889dab37e56e9f0b354cae1333bcf6392062ab5782c9d

  • SSDEEP

    6144:fjJNYuR0Ifu9TxObxgAOSXmZa951GZiMd:fjJNYuR0Ifdg1Za95s3

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.115

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3020-3-0x0000000000400000-0x000000000048C000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections