Extracted

• • Target

    SecuriteInfo.com.Win32.Evo-gen.18337.728.exe

  • Size

    296KB

  • MD5

    9b9947b2b0b117705b6d6f3cad057917

  • SHA1

    7d2a7a0101dd0ab93170c2d541fb2cba9feedf38

  • SHA256

    485019b5e07aea65dc682c4b5e723dfb945270d5fae4478c2a138de672058fc9

  • SHA512

    38b2552d1a6a433bf0e3e53e615e268487bd9469eb7b9a42b933b0fca5b7e3b7f569b70f5de101a804dedaa193d4d0a9ce9957cff34f05b3d870dc54668d937d

  • SSDEEP

    6144:JVvKInZEFOs7w8/IBbGM0ye8H0d7hkYNbJfQf2:JNKInZEJw8gBDAJ9kYzfQu

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2