Extracted

• • Target

    7bf97b415231bf3441979108ec191b6e8db4d7d53141655b5bcda727d4b80299

  • Size

    324KB

  • MD5

    eb77dd316d560da9b16fe875746246c8

  • SHA1

    0ad86ae5f9a8526291af26460dbacb56b2a3b254

  • SHA256

    7bf97b415231bf3441979108ec191b6e8db4d7d53141655b5bcda727d4b80299

  • SHA512

    28a5fcc764543f4949a0a5f0e6b701a54125ffbc6ace6335cf2fd3fa585f1eb98479b7cb375966d9292723ff40c853240c4b3812124cd211d6086dfb4f974fa0

  • SSDEEP

    3072:tHwZqJDMpo91W+PTVu6xEXadWyVJrQUZ5evXwV/Ba88F+pCOJXmSIN8niFW1r:E1K3WTkW2JrQUIO/OFZRh8nrr

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2