Overview

overview

10

Static

static

10

6024-1299-...ry.exe

windows7-x64

1

6024-1299-...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6024-1299-0x0000000000400000-0x0000000000C78000-memory.dmp

  • Size

    8.5MB

  • MD5

    fffadccb369bf93fe4c7b1d6110c3b87

  • SHA1

    7918ae987ecffc70e26ef997bab5ebe2563a1572

  • SHA256

    a5e650bf884bada3d6d1e038bb73d9048f077d4616870003817014e39535712b

  • SHA512

    e55e72c8cb8a161d5620111ce17699dd76376efa405507c73d50cc2b18297daee14c973dc932157e13255dcb3b17ba490de7754b08d94f73c65e391b8e6fb90a

  • SSDEEP

    98304:8m+leQumtcBm5pkBEN7Apmjc8lTV9Y5NoeozAts2GfJJ0KK:adkzYTV9Y5NxbtbyJ0/

Score
10/10
gcleaner

Malware Config

Extracted

Family

gcleaner

C2

92.63.197.221

45.91.200.135

Signatures

  • Gcleaner family
    gcleaner
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6024-1299-0x0000000000400000-0x0000000000C78000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections