General

  • Target

    2700-3-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    b2fca6af21dae893746d555cc39fa6bb

  • SHA1

    3a153907555a0a519171f6e317604247c87578d2

  • SHA256

    6d7cb12c99ff72f5d5bc71dbcb9fa7aa1fcfd0181297f896997e6b565cff01ca

  • SHA512

    fec2e26c80821a89fbbda3762ebc9758b0b4e3737b3f0fb60adf1ed141996780d804d0e70992ca11e0ed24b044703e5bf7b3e3338cb4eee5cbd2e3d84077443a

  • SSDEEP

    6144:DlLxH5j46nMNiRPx25HGvprekNi7YeTee06r2ATMaCRSodxk3xPQFjJNHz5Kc3Sr:DxxH5jjMNiRPx25HGvprekNi7YeTee0Y

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2700-3-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections