Extracted

• • Target

    18cfd31ea4d5f3067e38a4f63ea9d472b76cbdaaff870ac5bcdef16ad44ab22d

  • Size

    361KB

  • MD5

    1b86e8ad2f2ba88795d463ad580f3c85

  • SHA1

    dd0b62475f8c2b0cc547e584d428d1bd4f4c7cbc

  • SHA256

    18cfd31ea4d5f3067e38a4f63ea9d472b76cbdaaff870ac5bcdef16ad44ab22d

  • SHA512

    7917fd3f0cd753899a578b34a22a73729ee8640cb01dd7f588b8e65f444d904f83a8167b2d07bb251d42ae7674751c8dae8434ffaa2c6ab9faa01dfd0c54bdcb

  • SSDEEP

    6144:gCcCt5t+kaBexbu2TkrWSJQxUHXyFrH1P2DCL:my5tSBZdfQ/tl

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2