General

  • Target

    39cdd7c001ef759101580e6adca1559188bed6a953dd89cac4b5a5dd8ec12575

  • Size

    324KB

  • MD5

    aefd520c2581605886060397aa1364a8

  • SHA1

    1a57f628dfa8ec3b2e3a8eb78932ac87ce26cabe

  • SHA256

    39cdd7c001ef759101580e6adca1559188bed6a953dd89cac4b5a5dd8ec12575

  • SHA512

    7b3834703474f776f88f0973f9285ac954197e99100eec2ed9852c026f1cb4296acaedef787add46284cf9fd720bcf25d49b7589b2d600c1f640ed8c28c40408

  • SSDEEP

    6144:msYSsp5yL23j0Tj4M6aW4I7NMk5B8k3qX/SCm63P8aAO8X5ESqAguOSfmiCQsmG:msYSsp5R3j0Tj4XaW4I7NM0B9a0wyjLg

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39cdd7c001ef759101580e6adca1559188bed6a953dd89cac4b5a5dd8ec12575
    .exe windows:6 windows x86 arch:x86

    01e28360e3d419170740bd05c96866de


    Headers

    Imports

    Sections