Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    a6ab04cca14aece0c6368c194baf661c

  • SHA1

    d8acca325c59bab0eb26373611723d32d91c2485

  • SHA256

    ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96

  • SHA512

    3f2e7c030c1380ff53bc7fc8da47bece23ac0e846e862bc21bca475a8818881dfad1d2fae2e47c9a76c24e384bb36f7b24b7152c2e1956e727d455b1682a9db5

  • SSDEEP

    49152:bgw2aVxkJpmcT7a59MJ1SSuwDnxeN+wKcGodhp3r/8AlRNELCgv2MR:cr7JpmcT51SiSK+3r8gQv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2