Extracted

• • Target

    621f05c3a5bc27def35adf4d0503b2f5019db2f2b72a0452c9a14850c4495779.exe

  • Size

    292KB

  • MD5

    2ecec283adcd319326f271ed5a79638a

  • SHA1

    e66e5423dd5855fcb95c6f813cc05e23004b5e1f

  • SHA256

    621f05c3a5bc27def35adf4d0503b2f5019db2f2b72a0452c9a14850c4495779

  • SHA512

    ff820293d62f6633e2bbaf53c757ec1d6bf5907057db86ce31c1c6f11b2e55af507aa1464dae05c4abc43fb0f655d1a175465251e104c39c0b0b7928c9452fe2

  • SSDEEP

    6144:r1o2tWGS1EyPyJdk/ZQORtHV7qJnj8Zw8QN:raAWgyPGd+iJ4K8Q

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2