General

  • Target

    2980-2-0x00000000002B0000-0x00000000002DD000-memory.dmp

  • Size

    180KB

  • MD5

    31bbb066e3f2341e8279c5f33d5bd8d7

  • SHA1

    481615ebf6bedae7f694fda1d2b9f3a221f0a9ab

  • SHA256

    b4480eab92575280e2e1e155c1d8c761e3774472aba4d3ca438be043872edef1

  • SHA512

    eec07d4abccf8d5e2d2b4a54a369186e89b567bca29aff456714c86b9f3e4706578385605e9f0a33286ad27536f8b71a597bd5cac06720c54e8737883f4f4c60

  • SSDEEP

    3072:8/vX0rLGLUk8+lzbI0DANFIJqJ+jRCcikiNqv9SL8O/tOAg0Fuj0yn80JrcZa:MvX0rSLygI+ekRCcDiN1gAOYQoZa

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.65.64

Attributes
  • url_path

    /advdlc.php

Signatures

Files

  • 2980-2-0x00000000002B0000-0x00000000002DD000-memory.dmp