Extracted

• • Target

    43c684cde21885bd1a7add14846c6ce0ab374a6ff7163b655ec80186620770d3.exe

  • Size

    331KB

  • MD5

    2cb08ca754964460e0c6d81e1250c974

  • SHA1

    7f62b1284addc0f579b2ca240352027711d021f0

  • SHA256

    43c684cde21885bd1a7add14846c6ce0ab374a6ff7163b655ec80186620770d3

  • SHA512

    c00361862d1977e1a591a0a2ef21bc35aee37a97ff55ecffeb632a850000456613d497fa76e23a7e676473fd9a4bc325a0443a7bcf95fda512e3a08e314785ad

  • SSDEEP

    6144:H5XlqHQCFVZqVFbFso4D3N/B3yoGkaFtZWfdW4TE3v1144C0K:H9sHQCFVQVFb095CGaFtZ4dW1cn

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2