Extracted

• • Target

    4d765080ac1b1abc993e6438cbb7353aabd7d9759866c04251297aaca4b45388

  • Size

    264KB

  • MD5

    b1abe479d1ca92a4981505e51e69b04c

  • SHA1

    91bca83f7a4bd95f4db33d512323553378523c03

  • SHA256

    4d765080ac1b1abc993e6438cbb7353aabd7d9759866c04251297aaca4b45388

  • SHA512

    0615b2ce6bc2a41eee68ef8503c503f1605d94f5922a62d62f062f735bd05b5b00eca90e53484eb3ec32493ac9a063d5202218c093ac900ddad757e6c7b9e833

  • SSDEEP

    6144:RchiOMLvuWjb8vFTz6oEIsUaXjAiy+VvrDs:RchGLvFex5EI8p9

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2