Extracted

• • Target

    3a810c8e25c4e2bee013eff6ff95fc378456abb435299da1faffe6ac12d0934a.exe

  • Size

    222KB

  • MD5

    6410d5a54714bbee2d34c32082e6ecd2

  • SHA1

    e98ee40e25c1a52adaea2147bab0051bd510177a

  • SHA256

    3a810c8e25c4e2bee013eff6ff95fc378456abb435299da1faffe6ac12d0934a

  • SHA512

    2a139bf11167569722060fdf0cfe38628fafb09d4353f9801025bfcd454366588c9d9b11712a32d17938fb5dff73196704aa42a43257d0dc3ed903881e814c77

  • SSDEEP

    3072:venboFIBgJ+EWroYEzDIwyBql9zZvMA7+LDNzE7MTKwxlFrgC4:WceEWkTIGl9OA7+tzEIllFr

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2