Extracted

• • Target

    0b58b97488ac17f7aa80c4581966782d.exe

  • Size

    270KB

  • MD5

    0b58b97488ac17f7aa80c4581966782d

  • SHA1

    d8fc50d1115b21fb3c02311c08ef651cd2808a2a

  • SHA256

    dac1de6b2503baa1e80b0c90555aa87b663cd6a8e57651c97aae775defbe8f29

  • SHA512

    a842310d98a7d9a54a98fd593febcbbad2f963e2a3599218ac5fdbb8c526b2f7ee6113cae3443386384533f81e02ba46883a2663b0fe0a38f5dde544231bc82c

  • SSDEEP

    6144:ZSpkt9lfdyRqKoFrWvzpjhLY/qM8Q50/OP3Xp6Z/ofA:ZWkbpdyRqKvvzhhLkqM8lO5Io

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2