Extracted

• • Target

    2b8bd7a751a20b2413f149d077a5b3e8a170fe984b5f04109a99223def79bb9a

  • Size

    262KB

  • MD5

    ed64005fb78222847ea3783000e4b7b5

  • SHA1

    bce4f12aa5fd3e572bada7395439f4a6d1214ca1

  • SHA256

    2b8bd7a751a20b2413f149d077a5b3e8a170fe984b5f04109a99223def79bb9a

  • SHA512

    751c6b0d2d14b0fbd168772e109d8cdbabcf56cc711ed1d22cf2339ff02dc51ecccd4288d35313a9aa0347336fe146441b839bc3576c4fabdb6fdd1264c3b1a9

  • SSDEEP

    3072:47twKWZ9QvuBhZnSN0SQxw+xEpdsaqD/hOxFof5yYxY3sDAG:46K2OmVG+ipds/9OVzG

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2