Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    03da9352d0aaaab667f01e2e7fc9ccab

  • SHA1

    f0f5af7b5e4dfac106d811bd900e543012bd1edc

  • SHA256

    e1019de0f28871b25d13920dcc58f2a85a85d9cce0c2fb5caafff71052cc4e81

  • SHA512

    72f573a87f8ecf70b4abd8829adfa35ee0c97510ca243ea08078ea2ebda8a5fd84cc547e0dba6c76f33c216957129ca164f531cd886c098e84ec45338e54c00f

  • SSDEEP

    24576:ffOym3/ZyfFA+vjZCf8/j4f0B8DiOp3dR9ZQbA+MIwQKnvGg6eubYFOWdl2vSBrE:fGlEfS+lCSks2D7p3sAX3nvGg6ApFeua

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2