Extracted

• • Target

    1a050f9f569c84e6082a19ffef91491eb4837460b5eb276c641a19692c763a87

  • Size

    2.1MB

  • MD5

    967f9770c9085892a0c56a52962eecd2

  • SHA1

    ffb66ed3e060059dabb9419c2fc604c5ba8ada72

  • SHA256

    1a050f9f569c84e6082a19ffef91491eb4837460b5eb276c641a19692c763a87

  • SHA512

    dfe6b30263148c46cde484c90885408182d1b915bc5064784f8e0ca3cfa2c27d46e01bc6ff8755904384af682e05398692cb1f6760b1851cced782e09f2c34a4

  • SSDEEP

    49152:M2+OuWiGuM3/oH9OEoO2yzgBIo1PXEN0ZiyLxAII/m/WahOVLM0:h3xiGuUgHkEoZ6gBV9X9h/JhOVLM

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2