Extracted

• • Target

    file.exe

  • Size

    2.1MB

  • MD5

    aa0d78f125869e085c18e0a6c11fc3d1

  • SHA1

    1880f694c55675005196a7f639663d51860d7655

  • SHA256

    c0daff7a78caddab6145635eb995a71eff59096adb986a2ad236df43620fa5c6

  • SHA512

    cd8c18f025596178efc5e2bd430de8564d50e14d64086a5239518235fa28aa046d86707bf05368bafe64dae9a724268ae4f6c9a855f25c1a254f35258c8aeddb

  • SSDEEP

    49152:icPLnQEGrlQYqy7QPg1HrSXW2yiZkaMEDaOWu3vfwNLCgv2MR:XPLnQEGrBQPaL8W2yiKaMnOWFRv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2