Extracted

• • Target

    file.exe

  • Size

    2.8MB

  • MD5

    4c87461caff43c17f64e7cac9ced159e

  • SHA1

    36f8c63880aff9f052fb92b700effa7ca864cf9d

  • SHA256

    95129971e04dca04462ef5db4c6dca1f6bf4d6132ca17e90ae197a302817ca94

  • SHA512

    77f9ab542de3ec89fbf5c3980c74a6db3bf9c4ad767a6e436ef818c23fbf677fa3e2af4129da26484891b1272808fdbb4564684d7328eb1cf8abc417ea698280

  • SSDEEP

    49152:XHQR76qQISK247xf6cjdrgLp+K+qfvKXYo5DsbiSfVBNALCgv2MR:35qQISKB7xfZgLp+AfvKIoVsbiSNLovV

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2