Overview

overview

10

Static

static

10

c37679e78f...7a.exe

windows7-x64

8

c37679e78f...7a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    afd1a468fca77fa09901d7bd6f53079e9a80834786a942272e8c364f6ab7a3b4

  • Size

    128KB

  • MD5

    7a4625076dfee87536e6a4499fe2289e

  • SHA1

    7d4791a03bf9142f35a73eea33278509d461b2da

  • SHA256

    afd1a468fca77fa09901d7bd6f53079e9a80834786a942272e8c364f6ab7a3b4

  • SHA512

    ac6bf4caa75d723340c906a789dbf09ade8a5dbc18f4ffc0101a57878ee16728e108ecaf0d7a7b1e79c367c6c2a8d60f41cfb5f313f2fc4d4f6c61ce54d15712

  • SSDEEP

    3072:G2+2HHEXUkLMQK300YsX+AqBngbyko6vuHRd:7HHPkLMVrYsvanKyN/Rd

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.3

5.42.65.115

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afd1a468fca77fa09901d7bd6f53079e9a80834786a942272e8c364f6ab7a3b4
    .zip

    Password: infected

  • c37679e78f6af5ba63dedfdfa3c66327626f6a4afa19359ca80d02ae5e1f827a.exe
    .exe windows:6 windows x86 arch:x86

    3d373b41f750cfe34bc80626c0be52b2


    Headers

    Imports

    Sections