Extracted

• • Target

    206f7bf98269d08b4cb9aaa0a97214e0.exe

  • Size

    350KB

  • MD5

    206f7bf98269d08b4cb9aaa0a97214e0

  • SHA1

    f827a30d0354844bd965135dc2e652f33986b8de

  • SHA256

    8d8369a5383653ff8f891ac08546aaf807fe2d3d355a04f5ce8f4b22ca78685e

  • SHA512

    965b3f862f397dfed544cacd4ea98ef653811d40fcb073272350583b3552746c1c7057124e8ee0c63b00d64e094ffba359bc71b7afb20fdfb04ddbfff985c889

  • SSDEEP

    3072:WbdohbCWGrOnG+E6MzRZh+5o8WMv9vMV/8ZH59Gb/wHsZCJOFZJY/QnvyVxgpG:flx88G2fBc/G5gb/wHsIJO6/svy

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2