Extracted

• • Target

    be4c2f5f2e00c17b06080726837edab8

  • Size

    362KB

  • MD5

    be4c2f5f2e00c17b06080726837edab8

  • SHA1

    5566075c0628c72d06d9426c8d9a85d9efd13a1c

  • SHA256

    d8adfd0011b6140079ee523f76e3b02c158768a57cdea193e8f602e7f3756117

  • SHA512

    ef6b87d4b533ba30b1661a13097048d74adf38c5b848e6ffb60f150b98af53b7095716b21609adef560ec004cc50139c78684f3f032e2bd2b83ac201dbc43eaa

  • SSDEEP

    6144:g/tnXvZuPGXRVs7JPfqq8mfcwaE7jIEYIM:g2Mq8aQE

  Score

  10^/10

  gcleaneronlyloggerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2