Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    e013b2105484ebaebd58868a649ee074

  • SHA1

    1295111fd9c2e956f1d78e82f700ea1fc405aac3

  • SHA256

    84b80a9d2421c0e7a5d401bf3496854b910dcf1fd8c7b38236d6bae8520036a9

  • SHA512

    43877f0149088048017d871c1bdf74c864ba236524502dcb1c5c022fa94d8594d5e530719a4dbd6f068982d728cf050431e0267d1a6620b7b3b75915ba07eede

  • SSDEEP

    24576:OfOym3/CYBFXwnxWXBk0MffRZ6T0tfnIqdl2vSBreuS2w02VnKU:OG9tHHXBixUcRFeuZknn

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2