Extracted

• • Target

    file.exe

  • Size

    3.0MB

  • MD5

    2a0967cee120b43bb1038d64f2f16a29

  • SHA1

    6b8d6410493767161387145b895d049952370543

  • SHA256

    1ac812bffe0bbce5d4213cfff6058ae15501ce3eeb8cb32ef4d0d8ff8d4b0200

  • SHA512

    7977968c6d6896f4cb8e881d368da1935cc43283b7ee71a2f943fb6154657e44d9dffa52b900e4a9315779f1e52c87d137984f3aab72e6aa4b3216b6b39f02a6

  • SSDEEP

    49152:rdHb2t81MRv4OOcztihh+5WuDfilW3R9eP9ERCKEvKsf45AZm2PEirLCgv2MR:JHa+2vOcztch+B2Q3DM9EP/5aLXv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2