Extracted

• • Target

    3aa97a5e2d24316daca7529266216886cf888b6643b77c1e6c51ea42600e61c5.exe

  • Size

    270KB

  • MD5

    0e64802a39def8b062a90ac724456d44

  • SHA1

    7745f11285f663d01c01bfb55e230f7a871e7f52

  • SHA256

    3aa97a5e2d24316daca7529266216886cf888b6643b77c1e6c51ea42600e61c5

  • SHA512

    1d684bc2de3bae0b50e3fd15dd3824e40ae5ee22c6983378c76f06d248f77d2dc231eb04ce5f880db400ea7b54da4914491df2d4006f18b89fcfaa3b1b947906

  • SSDEEP

    6144:l6GXXyJP2yz6cWUcoKBPnjoc8vO+Tn849:gqCJP2ylWn9jmLr

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2