Extracted

• • Target
    file.exe
  • Size 2.1MB
  • SHA256 89a6fd55bc58ba7e756997050d24f09d3b3f1899ab8e6dcc4c91711c26a38b5f
  • MD5 3902a547ee3265fb74f6f03983699e70
  • SHA1 4e212104165a088afe660bc09ca99f29738641e4
  • SHA512 61205e0aaadfbd31829c7ec51ab0e96cb19ed60e2d0e8a9e67e69e1b54f70e2d72919b091984bfa15956546b1e84a2da29cf7b67d4b42dd7078fc0ba8b94d51a
  • SSDEEP 49152:2cez/+ovAAFtRAY3QYKyDBxuTJGHBRRfWoiL5psHXGFLCgv2MR:DezNvdRpQFyQJOfilpvv2MR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3