Extracted

• • Target

    6560d3bd09c082f86fa0dfb976088718e83f4621e6c618a80feabf7541e988ea

  • Size

    296KB

  • MD5

    3262af29c71f39ae3bd80b99d554fe76

  • SHA1

    e942092a8e1df5c8d96ee760aa084edadadec694

  • SHA256

    6560d3bd09c082f86fa0dfb976088718e83f4621e6c618a80feabf7541e988ea

  • SHA512

    50736a07669ecf4491936089a03b3c7f474ee32df55cb4a8c0c1b3b2b6a1fc9323fe6af4c7a622f93de8bd219a0f888349e33b5db4471e0ad9b3baf520908f16

  • SSDEEP

    3072:Uyno3vsybbG87MIGQimVZqEdBkiCC7EKFc/a8Lk8EV7l6IxhWATRFtcDU27TVfq:No/JbGYXimWliB/FuOV7UI5btg7B

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2