Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    a77c256d458c466a500ec7ceabad8892

  • SHA1

    fb493172644fb4fb533d5b98ac0e73eb1f5cf0c7

  • SHA256

    2591ca19c57ef1a5427850b524b6d280fab1d1784913041f541e31f9273bf524

  • SHA512

    ec165fe2b12ec3880fff34ac31723cc994c65e393ce4cef365bb6a98801c5e35a7dcc8a4fe21aa3c65b40d810c88800c933133d23b0bd68988ecc8c058df7e41

  • SSDEEP

    49152:bgP9tlQ1EYtvIQKT9Z6AZNqIDsoH4lBdqbKdPQogVSUZ8LCgv2MR:cnlQ1EYtw3j609sVBdqbuzHUiv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2