General

  • Target

    4c5dfcc927c2e2aa9057bdfa93465e36f65b6a11fc9e68b8a74cc4d51033871a.exe

  • Size

    189KB

  • MD5

    ebd456b188855468e9d6964f0d5bc926

  • SHA1

    68f955fe90bedfa513fe103cc4cb6dd47b25c0fd

  • SHA256

    4c5dfcc927c2e2aa9057bdfa93465e36f65b6a11fc9e68b8a74cc4d51033871a

  • SHA512

    f49ff668076b2fc0197fa31dbcc1eaec32d160f4baeccbd11f95d81fec7560b47c1109545bea4a9c2d39347d1ea64f5a250786b1bd16e7ba7e60f7b71a415caf

  • SSDEEP

    3072:G+pQ1iFLsEPUlyMskpmMrj3TLTDr1/xTi/dWOaEYUV6wUBKWmdw8OocPXGwRipHY:G+pQ14sDlNskpmMrj3TLTDr1/xTi/dTZ

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

5.42.65.64

Attributes
  • url_path

    /dll/key.php

    /dll/key.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c5dfcc927c2e2aa9057bdfa93465e36f65b6a11fc9e68b8a74cc4d51033871a.exe
    .exe windows:6 windows x86 arch:x86

    3dec43190d41122a8a4566a065ddce5a


    Headers

    Imports

    Sections