Extracted

• • Target

    file.exe

  • Size

    2.6MB

  • MD5

    0c6166c86d6e5567d07089b17ee9621d

  • SHA1

    46a1a8a77443a49faf3cfb00de1f4ef146a0de33

  • SHA256

    bd26e2e684f251f318f5ac8ef5105fd235e21fa338a26b1d3238fcd9cdf5271b

  • SHA512

    a352ed482eccd204b8fece34c6a785187fd8797a1825bb8b2b3b7c69d616f353a564709747f0bb189f5e17a68b5c6cb69fc70fbb2f2daf0d1f563e01ef766963

  • SSDEEP

    49152:rdH0hF2CXHYIfMFIrcgophkrxWC/cReVecs/Rz1JqFHuiFH1LCgv2MR:JHcQ5If2QToha/cREuV3sumpv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2