Extracted

• • Target

    03803dc71c996ce8a0dc7fb6aff2fd8f7623d803e3740eb38de13208ddcfbde7.exe

  • Size

    1.8MB

  • MD5

    5b8cad8745bc9ecb60119026d233bc10

  • SHA1

    52753d7a2ea01ee3f7f5d81600d60d5a6441a862

  • SHA256

    03803dc71c996ce8a0dc7fb6aff2fd8f7623d803e3740eb38de13208ddcfbde7

  • SHA512

    f44a7bb25c4754b2531aa027ca7ba0f51758c52f3a735b11e9b9c2c257c038c2e39d3c4d2ab8ef7fe055942e9289acf4e2712463dfa7a0ea4bc8b3f08ea36b90

  • SSDEEP

    49152:EGlJfsBSf+lyU0HPU1fFIUDFLKMSGWXxyyxg8rN9l2SJEG5dlLYp:5kOUUefFbZ9SGWV3ZfJEMPYp

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2