Extracted

• • Target

    file.exe

  • Size

    2.1MB

  • MD5

    924044a0c017c9db7063917d9d2744a2

  • SHA1

    95c64f07afab572fcad55902340ca574b05ed856

  • SHA256

    f9757bc4b64757aade6871dbdcb59d64ad51a7dee7f30834e27c6bda5f3b201a

  • SHA512

    8a61cd86cab79a9086cc55f80d35f56bd7e3dd666d53298bddc94fd25c9592c395668d19d51530913483329b1c7a0f07fcdf674fdb6225e986f3a88c372227ba

  • SSDEEP

    49152:EGlJfsyzcvr+ddPYqxDVCc4Z4HZeveyHniTQsiU7gdi5dlLYp:5hzckPYqxRCBK5emyHnGpPYp

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2