Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    cfe7497890c5d69a0999b91d613b85fd

  • SHA1

    7e4bba924f92a3d060850211cfb8c8f3c1742b8a

  • SHA256

    5e6a2bde98e5e1e99b8d7bd5383b057068b3ac075d5c3521a91b24919f9eea3d

  • SHA512

    b0c30f5fb7eb47778de6c4c711af700024a20d55cdcdf8d79fac70d2319d5e0405ce1487a19bef4e47acd1e851bc2f158f85b4f03e07c486cdda2b85e8f8c393

  • SSDEEP

    24576:r20h50Ftb9eyobU3e1yEj5K5mK0RNyQPSjKtoj63QSiwrlhwCbr:r2w2tb9j0U3SyY5KkqQKGtoO3QSiwrlh

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2