Extracted

• • Target

    2a8fdd6a69c03c5a536b9c560a65b6d25056c69416e952c51e9a3de4ed2fa2f0.exe

  • Size

    1.9MB

  • MD5

    cbd8b305092414c89d7c5e2b0c4975ea

  • SHA1

    b0800cb3962a493f783805fe8e00692fcef8edaa

  • SHA256

    2a8fdd6a69c03c5a536b9c560a65b6d25056c69416e952c51e9a3de4ed2fa2f0

  • SHA512

    f098a54828773789293762958f2330f5f00e9e91472f57386954436c204675d8e48b063ce1e3fd7a93a9b1c8cbc97adb588c30fcf1d5cad263655a59fa1aaff7

  • SSDEEP

    49152:EGlJfs4PMjsf2rhEjfh6aOjHAK4EuSK5dlLYp:5IrhUfgjgZEroPYp

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2