Extracted

• • Target

    41eba63857509c8a8a7933e635a0acbbde4e76c1f69ae228af0688fdd17c689d

  • Size

    220KB

  • MD5

    4722e4fb8995a4fac4b7cc7cf4c2d8be

  • SHA1

    6aa95f004e33451d831dca3e964fe351accb39dd

  • SHA256

    41eba63857509c8a8a7933e635a0acbbde4e76c1f69ae228af0688fdd17c689d

  • SHA512

    af4133760460ba6fe76b64a31b174bf789c81b13423697c1e8c74e7ca5840d0f223653e30cb904a9a6b75c36139ec6742855b4c2e6c0aff38787911e0fa55952

  • SSDEEP

    3072:Msa+zaISwDcOK/byKDr009X9ugbYMRTW8ptmU0zE6EHOQEpPOK:Ja+zaBIHKzyYwmlTW8TaE6ElwP

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2