Extracted

• • Target

    file.exe

  • Size

    1.9MB

  • MD5

    307b4e0676ef3c7e9068c89ceb16b5b7

  • SHA1

    eb9f814de44be3581f9c7a12e642dd9a04b98409

  • SHA256

    a8674ded41983f51be7ee80e61d5f42746f7052aaf9faad34c572fedcfcd203c

  • SHA512

    5e52e798fdaba56905cca9543acdafdf3c03648d3c66c88087b02757497a4dc61db8542def298d81755cba1c872f446473474ad5f9ee275cdeee0ae6a3d72376

  • SSDEEP

    49152:ygjGD09aF6uW2TovLUdVey2OVMqJLCgv2MR:TyD09aFLXcvLUdYsv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2