Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    fb64d3a65439c6c93c6a9e9141e33043

  • SHA1

    95c48946a8fed8dd624623777699bbb9a0b330be

  • SHA256

    2c81ef2c59bcb22035ff5760f4b43f9e3543475a1e8701b233544788f7e85378

  • SHA512

    15157d549a9f5f1ddecf6acf78a4a8e87fc6e06da8d7b92e836c15239da89f381c4501cf8b9c5d14dab3c05e48e2b1840c505c58cd1882f6964ba8d561e6238a

  • SSDEEP

    49152:bgtYGF1Ww53mijs1aAvBxek1a/Unf7c/m+J5J7nLOjGQdIvuKMuLCgv2MR:ct8as1vmkAUfcmaZL+1lOv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2