Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    ebb43d8787a9811e685897018eb2cbba

  • SHA1

    c9432f2963c605e7f3bcf138e2447d5d049d0ec3

  • SHA256

    afa4645481c603615685ab6f7298168464a4d6cf738c34568d98ba7963a0106a

  • SHA512

    131de3257696e91549d33ee7b702f5bf17939935a7099a90755f77e8be2d7d327dccc6bde7aee10d024d872eadd13921b6db3614dd2cbf0535a088b747070b67

  • SSDEEP

    24576:g20hhVOt0IzQyuDO5aJPd2bgjkZXtQpQObaOPjo1zfFTYf+kATuCqtn/:g2QVezMysPdp+S1jO/kATuCE/

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2