Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    92a5558242abeeb22d7ff8de81a7c17f

  • SHA1

    de6f87e3cb63cd1d54e41b015442e8f60687f26d

  • SHA256

    049b7e819f6492dd5a42342a6b6527244ee255909fcc13a95b5f1c222f01227e

  • SHA512

    6acc5d180ed21f88edd18373ce1b4224ede1f733f5c3911c81e08914df9dd80079d1ff6efedecb328d6b3bcb123a880a76a29d6252ac9545f5d11f354577c0a3

  • SSDEEP

    49152:nZMRaJUETSe2Y/maOnLVYUIq8Acqs3c80uY503Z1THLCgv2MR:ZMa7nN/mIAcqqUITv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2