Extracted

• • Target

    file

  • Size

    2.0MB

  • MD5

    b57a149e35a706aa34417415964b6d2d

  • SHA1

    1829149614a14a4cb3b8b03537c0a9d7f36328f9

  • SHA256

    13f5c9f438660228d68bd1347c5d09c0332687e3b117952f53487c6612e84cf0

  • SHA512

    beaefe85641cd27ff9cef2bbe8bf42051ff4c157cd4bdfa5223fd1ea32c264e1cca6650eca05dafad368c638ac3b9c7a84687fb4d5f800ddbc787372924ce224

  • SSDEEP

    49152:xaHKmO//SxFCZ6LMqTxcp/HI96XQMl6fvIetZQozLCgv2MR:QHKd/6xF17ckIett3v2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2