Extracted

• • Target
    084867eab2023c445721b0cd205ce47a.exe
  • Size 419KB
  • SHA256 5d9dc24f2de724f0921574f0589d39f79cbdd85cc817a6345267aa9aa9632a2b
  • MD5 084867eab2023c445721b0cd205ce47a
  • SHA1 0f465ee53425b4c9a963f6ecfe1119840fa810d7
  • SHA512 58ec053935a7d8e2f206f3ecf76ab575dcf95736f1f23c2b8944ff4e5c31b3f6faaef20cd959a8206003c298e82770f456261a3122f815dd6347f08dd1992c3c
  • SSDEEP 6144:pryICqvsNS64vmvH3uSlMe1DjJY4aUWXCZnMDHzfA2PjdlIJfD0:pryIC2SHhMexi48y1MDTfA2dlq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  gcleaneronlyloggerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2behavioral3behavioral4