Extracted

• • Target

    bf1da988e71f4e6b5aa9ad169d1637ac47ac43b548fdb1173733922d620572c5.exe

  • Size

    273KB

  • MD5

    bd6da92bd52d003123cbc4759dec1002

  • SHA1

    9dafebf9cfdc15cd54c56b767b07b0d7944d1f92

  • SHA256

    bf1da988e71f4e6b5aa9ad169d1637ac47ac43b548fdb1173733922d620572c5

  • SHA512

    9c7867046c173643f150a322a95f830c0a04c2bc50b72925ffb87dbf11188d54d3152d855e6741e3b107f0c92dc9e037e421d531ad2921226fe0b71042ede302

  • SSDEEP

    6144:BqgzUOOHyHYY9CU3v/fQ1Buu48mVUKfm8XZdpqRI:BqgzyyHYY9CU3v/EBuu48iUQXAK

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2