Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    87fbe33402ec35e1bcd2aa5e773589d7

  • SHA1

    f7dd21bea56a753a3a18ee79d5fb3a8b8bca1693

  • SHA256

    53b2cd343eeb025b369d84a7034b7e68ad807ab1e1b616eeb361875e97278cef

  • SHA512

    f9c40a8c2c024e767b15c4c9a226b5f328bd9418d5ef6c6e55ed85718dffee300c339369799cb3e737448614a5aa5240f3002cf4ea50a99a414705f3c7afee57

  • SSDEEP

    49152:bgShVIvrrgtQhlvRkgF5hUJvSsaUQiBKV5fLCgv2MR:ceqYtQhlA1gUHBKV5v2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2