Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    6326cf82691866f30d00e3dba752fe52

  • SHA1

    dbcb966707d96356f6db235dea04acb012b5fc14

  • SHA256

    05523b484c9fcefdb45a393c07cc203de6f4028fc3805f4fde0c632ade9b17c0

  • SHA512

    ffee8efd1aa210b41d6aef7e1c007f2771a12163512bf2a6e86580e60100c06cebe43d747d64c6c362f2812a98cf8f6358429664bd469e89561275cfc092cc76

  • SSDEEP

    24576:r20h5D4ji2Vundw46aeDL6kXT7L+40PfbGXA97A+nshwCbr:r2wNLoaIL6kXL+dbXs6Cbr

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2