Extracted

• • Target

    33d4a80974c2ac2966c637de8979624c.exe

  • Size

    3.0MB

  • MD5

    33d4a80974c2ac2966c637de8979624c

  • SHA1

    b3685b990a615bb4ee900e563060f92c40cf6aa4

  • SHA256

    fc46bc8d84655018b9ca234e564fa2edf3574948084ec4c621ac3793252b5105

  • SHA512

    9185629209413fd6db42865053de864533f1c7a9ded02140ec8637c9b8c9061625ded6e4056a3a63c43952a3a873630a5b131d72eb97712444e336233a3ea546

  • SSDEEP

    49152:zGlJfsFCxUK+F3tUzFx6mz3WtLALE8+SxWfbZFEewEU9cquu3mBQAAWG6ejY5zbL:qWg+FexImitLsEmxResWZumQPszbtWSt

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2