General

  • Target

    912-3-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    52c87ba44224f5b194bf82b12dbd9109

  • SHA1

    c76bae5b02e4efb3cd05adc3462876a3ea0191ec

  • SHA256

    809c226264aaada60ce1d7d942ef1ab6f30fe98fcbb55d482dda2eb0651c288e

  • SHA512

    eb09844bb2b1799666c444896528eb01b387304b1ad995b20ab42bd4852e2994442913588f7d33b746290e1b7f83b6e71595a226d06427b63bd99b06c9914c6d

  • SSDEEP

    6144:DlLxH5j46nMNiRPx25HGvprekNi7YeTee06r2ATMaCRSodxk3xPQFjJNHz5Kc3SE:DxxH5jjMNiRPx25HGvprekNi7YeTee0b

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 912-3-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections