Extracted

• • Target

    5b2abc18275778b338456ab4ed9d9445c8def39dc996d59865ed889435198229

  • Size

    277KB

  • MD5

    c307137db18cb4a830c0cd1707a85026

  • SHA1

    5af700e218025936913d31eb4dcdecfb40655a50

  • SHA256

    5b2abc18275778b338456ab4ed9d9445c8def39dc996d59865ed889435198229

  • SHA512

    73def79569c14ed3d0fcb7a38cac542a7ed425cb23b87adc0d2458d786e0b7b374e9b50ad831b3ff285638b34471030e7001c2515a5b14c3ca626a66a7cc1536

  • SSDEEP

    3072:LqXO/CVszc/xSfk7rI4o91yVwmpM/h1g5S1VfRLxRTnckVFJ5Kb6x:2VFBs1YDohH1VpLxRokVQe

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2