General

  • Target

    2068-3-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    ea2e27f85ccf50cb228b202e7bdfc098

  • SHA1

    b6431772c5eb54e6ced21ee94c183b17c38610c0

  • SHA256

    4ac0473f76823f92c51bd9fa0fa86713d1bb36e1102239a56804001c409a1d15

  • SHA512

    9a604a83b4cf66f120d396725da4e273f0f4457d77cd3bdde6f32b51086bf9be3d86763311f6acd14fae0826678aecce045ac1b55304fcc44f2dbad92146404c

  • SSDEEP

    6144:DlLxH5j46nMNiRPx25HGvprekNi7YeTee06r2ATMaCRSodxk3xPQFjJNHz5Kc3S4:DxxH5jjMNiRPx25HGvprekNi7YeTee0L

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.172.128.90

5.42.64.56

185.172.128.69

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2068-3-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections