Extracted

• • Target

    5e71070130f4fc38b4e3f357d0bed6f8.exe

  • Size

    287KB

  • MD5

    5e71070130f4fc38b4e3f357d0bed6f8

  • SHA1

    5615de8da01bd898004c78474efa569731876976

  • SHA256

    780ed40282d7d392080687d1e32bc017f63ffab0c0fb020d1dcf3bf7c4c186da

  • SHA512

    8997fd756c5c466b6cc4eeaa327dce7f22d872d0e033fd0196199c5198081ad9db2b1a1ccd53bb99770339222183ff6c9c3b3908286a2104476ccf2e9644b02c

  • SSDEEP

    6144:9dU+m6BDMpH1ybmak9rJyds1kau0Z2DIM:o+m6B21amYahuM2D

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2