Overview

overview

10

Static

static

10

21382b6a3f...95.exe

windows7-x64

1

21382b6a3f...95.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a631ebe009d08f933c1fc7660b5d94a3eb5e13fcde873186daa2f0a0cf7e4acb

  • Size

    97KB

  • MD5

    a85c1f613cdef6f665c9af5c3d7c335f

  • SHA1

    1853d2ad971aaea50909c1db213011084bb0b3bb

  • SHA256

    a631ebe009d08f933c1fc7660b5d94a3eb5e13fcde873186daa2f0a0cf7e4acb

  • SHA512

    f53e84215d6370485354034bde6a6619dec6ac6738e7ffe1a067122db2a1b39d8d00d3ec07915a305eee41bea91c8cf229e0aae1fbf70196e489f3bacad4e83c

  • SSDEEP

    3072:6FBSABf0nW70njo4Op/HJRRkuLVKAkhtwbv:OQAld70n8JZjRrkIv

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

185.172.128.69
Attributes
  • url_path

    /advdlc.php

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a631ebe009d08f933c1fc7660b5d94a3eb5e13fcde873186daa2f0a0cf7e4acb
    .zip

    Password: infected

  • 21382b6a3f31731282f1c2801626f85ac4eb2c9f9b2c02921ccb4f7ec2fef295.exe
    .exe windows:6 windows x86 arch:x86

    7995552d5727ea28793352af716fab7e


    Headers

    Imports

    Sections