General

  • Target

    3504-165-0x0000000000400000-0x0000000000C6B000-memory.dmp

  • Size

    8.4MB

  • MD5

    7d56add6cf7e380e1b4011919453bdbf

  • SHA1

    516c1063c0a6aa4e634402ddfe92a1b3f7f26796

  • SHA256

    8ff3af5d5c7f8a40bffe7b09295fa959c27a0939eac60ea6c8f258d530bfffd1

  • SHA512

    f77425db69559e2553e25f9bbe7a233665bcb5e5e54f3fe43518ed7611c1740eefe0354f4d222a0018a1fa1184cbc17755a1596950c4e10408c9a637f9d4e757

  • SSDEEP

    98304:8m+lf3zV1fKaU0aHUdoJygCHn7x4zYSalp/:9HU4y9Hn7x4l

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

92.63.197.221

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3504-165-0x0000000000400000-0x0000000000C6B000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections