Extracted

• • Target

    b4a0890b7b896b28d86af7c066ce54f9a9f51e17fc7e78349a1ceee92114f522.exe

  • Size

    332KB

  • MD5

    be8060c6a8398acadab32498f98f5556

  • SHA1

    e759f4222f13d900ba19a2c7fc911a9dcd8a0909

  • SHA256

    b4a0890b7b896b28d86af7c066ce54f9a9f51e17fc7e78349a1ceee92114f522

  • SHA512

    3f649fb726039bb4ff4ed3186de7141c1b3ad0911f6ea7fefef0fef3f08abefafa70faa870a6b9eafbd5f3ab58dfb45be165ed52f87ede1155fefbab4ae4d6ad

  • SSDEEP

    6144:QVXnCBimgu6LoCECJQv/zox+ePEczZ+mWdZe5+wOC0K:QxCBim4dECy/Ex+enQZXw5n

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2