Extracted

• • Target

    9654564e437afa4a9cfb133343e379c8c3c69f53f5b81f4cf2425c9cb9a487f4.exe

  • Size

    286KB

  • MD5

    67215a65f0750a47be8239b1f0e52ccf

  • SHA1

    c3e13bd46d93894d74fddfda1586dfdcffd836a0

  • SHA256

    9654564e437afa4a9cfb133343e379c8c3c69f53f5b81f4cf2425c9cb9a487f4

  • SHA512

    c11861b1c5fdc480ea154c1e5c4e22a590c99f6714541997e536dfa485ed82532a5d6387bd40383aae3a8d3f86f060f96af47f6db3b4d929dba097db53b66d42

  • SSDEEP

    6144:9af5UIKNEUtGWCZxD+WQ6WAc+BziMBXn/tz/JExFFtj:9afCvNntGWU1+sWAJ1RJEFtj

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2