Extracted

• • Target

    54806b60017267c2d634de528d5f0cca.exe

  • Size

    1.7MB

  • MD5

    54806b60017267c2d634de528d5f0cca

  • SHA1

    72736e9d33b9e5c7246455339744dbaee8e20575

  • SHA256

    37d6bbafca72c5e4cd4862db500df11b42efe23be023d9880593458530aab02f

  • SHA512

    c87a3e33f742d66830559fcce4166933eb0e3fa1e5d02f102141c14a5139cc1c16129d2ae712112f6416ec432b41fae1f0424b45ea9de30b3c57b98896cced50

  • SSDEEP

    49152:d2YLzygPRwNLAwTbIKUfEkJ+hm6IyreHxzB6:IQRwZjfTUfEpm6ITHxzB6

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2