General

  • Target

    1b54420df6aaa65cfa29159b3bd0387ea2e6ce0a22de3fb5aace5200f2d69b0fN.exe

  • Size

    1.6MB

  • MD5

    c89e2fee6ae55cebb8954d7068abee30

  • SHA1

    a10c19f243757d451861de2424f09ed940b92fd6

  • SHA256

    1b54420df6aaa65cfa29159b3bd0387ea2e6ce0a22de3fb5aace5200f2d69b0f

  • SHA512

    6feb38a06d486505f8ee74b98d2c24abbe03a07a9b39d46ff2e98c4e209ac457e8369910bfa3cdca343b818587f0af196a50070070dbb15d2cfcf88f89893fbd

  • SSDEEP

    6144:Udt56eh8ITcleMH9SDomjDBvMYos+CmDyZYIMsCIxl0J8kEMAOU1g:Udt56ehi/H9SDomjDBvMYojCmDu7esg

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

208.67.104.97

85.31.46.167

Attributes
  • url_path

    ....!..../software.php

    ....!..../software.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b54420df6aaa65cfa29159b3bd0387ea2e6ce0a22de3fb5aace5200f2d69b0fN.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections