Overview

overview

10

Static

static

10

2928-3-0x0...ry.exe

windows7-x64

1

2928-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2928-3-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    9c7ddb6e817ee7b2fe3104116aecfab1

  • SHA1

    b6c156c554e0212f084d47990d0835573df8f088

  • SHA256

    cb59a43b878ca7dfe2ec63407b48c94a3ccb3279753c425ce2970386111a358d

  • SHA512

    4973abcb94c424189e8d31566a9f42c091fcd2f54c56f249e3963a89d5a173ac0d2b3a3535e1708c7ac569572e2d849554cfc9dcb7838482d43cc56fa06c8c61

  • SSDEEP

    6144:DlLxH5j46nMNiRPx25HGvprekNi7YeTee06r2ATMaCRSodxk3xPQFjJNHz5Kc3Sy:DxxH5jjMNiRPx25HGvprekNi7YeTee0F

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2928-3-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections