General

  • Target

    d55990583408d2cea1a95895b47c2a0bd5634baebf5afb02348792a434c1de19

  • Size

    1.6MB

  • MD5

    cea38f148afa8d24e5de9ad23734538e

  • SHA1

    3b98750a55d47f5ced2e1d4affe1ae505beb93e8

  • SHA256

    d55990583408d2cea1a95895b47c2a0bd5634baebf5afb02348792a434c1de19

  • SHA512

    b65cc3a51e886a9915be1ab3903a64bb54c57da065ec5a2dc0cff01acfba8510d62663509606605fef42054e56b521937046e2519493363296915d76e3bc8006

  • SSDEEP

    12288:Udt56ehi/H9SDomjDBvMYojCmDu7Bhg3:ciXLDb

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d55990583408d2cea1a95895b47c2a0bd5634baebf5afb02348792a434c1de19
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections