Extracted

• • Target

    8a2ed465f876e200314451371c46e38ddb7dae622efe7f60bb7d58d9291651d5.exe

  • Size

    273KB

  • MD5

    bfe0a34bb6494a9b1e866efe97ccd11b

  • SHA1

    2222524e5bf603c3166ed445ae5f94f2ebe1fc6e

  • SHA256

    8a2ed465f876e200314451371c46e38ddb7dae622efe7f60bb7d58d9291651d5

  • SHA512

    9520cace14670c5aff3fcad7476c231d04b4a8b152f0af12cabbcc1a4947ca9007a2a65e3cf010e9a6dfd0f2388cc58def7d8e28338c3f516c0733613e28111c

  • SSDEEP

    6144:5qgB6W89GHqzCzKDJUF3sIcqZi5WZbvEeTqa48Hd/:5qgB6bGHqzCGUF3niUHz485

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2