Overview

overview

10

Static

static

10

4c5dfcc927...1a.exe

windows7-x64

1

4c5dfcc927...1a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebd456b188855468e9d6964f0d5bc926.bin

  • Size

    102KB

  • MD5

    55e74e457a45f8b38881c73a5f81fcdd

  • SHA1

    98db5c2bc38155e2a2c32fe7a62433fc95c74d63

  • SHA256

    213c2ea44a7c4a4796d9c8297ece415c070ae2718b7efeb536659bef46550339

  • SHA512

    30916076944ba34dcda4b27e6916ef4ba22b6b5efcf1f68777a6c08474a14df6d3033b8c2eb1adc275fadee4bc76663d0154c04776295e8df5290556b90791e2

  • SSDEEP

    1536:61cFqIpd2LfbRfLoeDwrtrf8UtL3WNX8TlnxH0msaDe/IzxfGGOPxjzqhFH71ulR:61cwS2/RDDwrtWNX8vUmqAFfPqjzqW

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

5.42.65.64
Attributes
  • url_path

    /dll/key.php

    /dll/key.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebd456b188855468e9d6964f0d5bc926.bin
    .zip

    Password: infected

  • 4c5dfcc927c2e2aa9057bdfa93465e36f65b6a11fc9e68b8a74cc4d51033871a.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    3dec43190d41122a8a4566a065ddce5a


    Headers

    Imports

    Sections