Extracted

• • Target

    354895bd5079cc205b265799b71ec05c.exe

  • Size

    276KB

  • MD5

    354895bd5079cc205b265799b71ec05c

  • SHA1

    1016ac93fad8d1706255e96f7807c1950bd3d78c

  • SHA256

    485cadde1de44b50c205f7019b7f63222af1e779b9a14b9363bd811d6933f80c

  • SHA512

    792fd2aa10633cb5b59ae51b2e124d9e2765f1d830b9f785666ef09683380e765b299fb528d319662dedcc0503914a95e5a30a128c021f20bb3498c047395b8f

  • SSDEEP

    3072:qmEFfQzn7IRveaMP7osVhZTTqadpBtrWAbTJhzoxM7viqOUAX6xJ9n+T6:UFYznoeaMZXbSAp8pz+

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2