Extracted

• • Target

    file

  • Size

    2.1MB

  • MD5

    905eb0187344f068860f1c15b8ad6cdc

  • SHA1

    fa458f1fa92ae18b31949145f7144cfc3a8a7a3d

  • SHA256

    e356cf8119ebd0d55db3c840eb42abd744b828a3e1367b2ee732e43624b616c3

  • SHA512

    16adf1fe6746e1841a971410fe19935e117f8a016cb70c90bff598b85360980824ded3195bdc8090ec2cae73675754bf4070ec2dd3ff9c670c9ac6b3591ee3be

  • SSDEEP

    49152:2cgQaPUI8xdXm5/wJG5IqLDTI++1xeKCX9dnseLCgv2MR:DgfPXsxm5/wkLI++1xetvv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2