Overview

overview

10

Static

static

10

1500-221-0...ry.exe

windows7-x64

1500-221-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1500-221-0x0000000000400000-0x00000000016E1000-memory.dmp

  • Size

    18.9MB

  • MD5

    770909a10630d9c330e590c6bdba8ace

  • SHA1

    52f8b80794a7bd2179061535e8019e67369a7227

  • SHA256

    88c82f09cf5d7e20e1e83a2e6a4500982177f7e94d0d58e21c3aaf0561b2e17b

  • SHA512

    5c515c4b3c701152c09681ae13cfa382e1796190413064ddb915df13b31318e17ee972c1ce58c79c30a230d7b666afc919a085e58dc01b0326f59abb554d47a5

  • SSDEEP

    12288:jHbjVIj/9PKKkVlbDJ4M7FjJgmrCzDL6UUnBz3:3x4ojCmWvL6Uq

Score
10/10
onlyloggergcleaner

Malware Config

Extracted

Family

gcleaner

C2

ggg-cl.biz

45.9.20.13

Signatures

  • Gcleaner family
    gcleaner
  • OnlyLogger payload 1 IoCs
  • Onlylogger family
    onlylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1500-221-0x0000000000400000-0x00000000016E1000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections