Extracted

• • Target

    94551b68fcb65d49a5d1d29a0dba5ec3f2e98252fef337a4fba2416ecb8cea76.exe

  • Size

    280KB

  • MD5

    b5d2845d8527d553115463d631b1702d

  • SHA1

    b63b39d1b3d2f477f965b460ebc05e765450723c

  • SHA256

    94551b68fcb65d49a5d1d29a0dba5ec3f2e98252fef337a4fba2416ecb8cea76

  • SHA512

    08fc0ba5967ecc8ff3b4442d59666913b0b704d8e172d34545ac6afcb9b041f93e30f807dd240d6baa76fc2ba56c2a825e6d27bbb755c0cffb841878d2174b08

  • SSDEEP

    6144:ZOLRv3eI/62feWK3az1MbbhOXXASgyA591:k9vf62fS3MSbgndS

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2