Extracted

• • Target

    file

  • Size

    3.5MB

  • MD5

    0aee134c830b4c421da05bd72c2c9e52

  • SHA1

    59ed75c9df7ae6af60e36a30faa34e32d511bf42

  • SHA256

    826236448111b8e946e673a234d0ef53821b2ba79d178c07573d8c39c36b3542

  • SHA512

    959a8e863e3b0e82fe5d55dd3546c9e01f9f5729a1ca3387a46b6c9d24ea7772dc199bc9f2d39eb9ca4962ea2fc439ed818e35fdaeb914b0f5b676c4b5b12d31

  • SSDEEP

    98304:JHlmr01zHMqPPPvkK39eJJGUAQYGgk330G6MFv2MR:d4QlH5sY9GJtAQYGRn0GhFvjR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2