Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    073e9528d78a9776c2e0efe05bc42cfe

  • SHA1

    5048466756842311abf0e14e4eb2a31d36d9e4a6

  • SHA256

    707b0327124d25b828dc2ac17325da53332fbd11876bfc9bd8c2552a8cfcd6a7

  • SHA512

    2d62ddf4f4dddef3e9cd01c3610e9320ccc2cf8150ee0ce6f3dc7bc9d647ce65746fcce6e2107d70ed7ac6a3cc8978b21f15ee679f907cb378478c221597b33f

  • SSDEEP

    49152:iiFlhf5F0qWZbMCV18LI6KWtdtWZS6dH/ws8wuC:iiFklZDjCVES6dH/r/

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2