Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    c5a6e651091934a2d6e9f1cc7c04aa48

  • SHA1

    6929e19acf3e6e3611a63c35e49e6deca651fa1d

  • SHA256

    53fbce5a88f90920d1df660957e55e7f5f0711af93f9a1e41581b001bd855b1b

  • SHA512

    49fc92341a83fab6216f56cbf75327469dd5473a091ede320c8e3606d23a329d42110a9fb843f85a59a8877189fa0342c3ac2d5fca50cca099bcaed1ece10151

  • SSDEEP

    49152:rdH2ZMGv/qjVWatDinrEZwqq1ocUuW99mzDOkGyLCgv2MR:JH2ZMS+VWGu4ZwDocUtwGav2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2