Extracted

• • Target

    94dd77178ad1adab9b33811abaf80eb23a5889da64446593a285b62d59f6191b.exe

  • Size

    3.2MB

  • MD5

    65f44ee494532771517d8e460aa7a678

  • SHA1

    48b22d6a7b60898b71ad28506b2fb5c70a676781

  • SHA256

    94dd77178ad1adab9b33811abaf80eb23a5889da64446593a285b62d59f6191b

  • SHA512

    e7d8ac71efc7d811a3edfcb5362cc07b7bb764d72517253ebc865635ac85c57421fe69fdc03a60a7b7420cedb7c358e62b07090a1519564da1d10449796cf253

  • SSDEEP

    49152:rdHAYF+gMmpr/fq2k5jO3/lK8QnfaVzUtB/XOFDha36Ad8+mGPGLCgv2MR:JHAYEg1p/fOO30jiVzUtFXOdY3oTv2MR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2