Extracted

• • Target

    file.exe

  • Size

    3.5MB

  • MD5

    b2211714b0632c5dc42da59db265a011

  • SHA1

    da8acaff54b22da73c5db3845eab0b66583b4ddd

  • SHA256

    7e2078636c31473a61616c80317bd47bddb90a4a957f2f635ac2311c7893bf4a

  • SHA512

    b0a71bab843a386535ced77abb6afe2db0fbc911f9adaffad832f46474470afc3a0648d2383ebe9229bcbf3dcc224eebaccba36d5a45b18e8f999d40947fb1de

  • SSDEEP

    98304:JHF3sFiCj0PKsL2Txwu6iAOFSuwvv/v2MR:dexpsL2qu6iAOPo/vjR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2