Extracted

• • Target

    15e8fbd7bf5a5f967c87deaeff5389b9409bdc51a0d75c55d765b2e1b99d9ba0.exe

  • Size

    270KB

  • MD5

    a7d2eaf84e08f5316ac1697bbbd00e06

  • SHA1

    05b3c914bd54988ce786b39cdc13814d10ef48ef

  • SHA256

    15e8fbd7bf5a5f967c87deaeff5389b9409bdc51a0d75c55d765b2e1b99d9ba0

  • SHA512

    aa24224e1bdc0255023ac467549de1bee15dad7538e3b56d5db20bbaf03f6f8e8b74b95c3a72e1274eb58a853d88a0b7cf5227b486f727d931af0cf229b0471d

  • SSDEEP

    6144:bbXn4tN/SsGQdxxZdQUV3ruDSsetMF8wV//eA3G:bT4tN/SbQ3xPBKGsBZ73

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2