Extracted

• • Target

    f6657feeb739e084356de73ea5076668476bde7a06cdc3f867526ca27c68fb2d

  • Size

    282KB

  • MD5

    d369af1128722a21e63b54767b27df9b

  • SHA1

    a134ed2b5d493e6c35e275d663b21ab8420e3cab

  • SHA256

    f6657feeb739e084356de73ea5076668476bde7a06cdc3f867526ca27c68fb2d

  • SHA512

    3e9665342b8f0b9817f023fdd0dc63b2ed51b4a3c2b529b8d92afc75426dd3f169b6592ac78899f25346259cd236cbf6626e445547acf431c0da2b940e1be36c

  • SSDEEP

    6144:0tnPIXREcJMcUsuKpoqoLhcIboriKVkk:0lPIXREyFUUp56horvVk

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2