Extracted

• • Target

    c3c6d48ad9fa159a77da6bdd690a68e54a9adc4ad03a2dbc3a3e1de05348ce88

  • Size

    294KB

  • MD5

    309ace488ec6db345db5ac0bd0923b3b

  • SHA1

    7448215f1d62352e1ccf613dc8d4a8cfcc7decfe

  • SHA256

    c3c6d48ad9fa159a77da6bdd690a68e54a9adc4ad03a2dbc3a3e1de05348ce88

  • SHA512

    c4b16620f8376860938f51dd99354916bdea8d025f3e065e03bd806b661c479b1e17591244ab984a9dba24e022bce050b7a2e4d8d8f648c831c2b360b44f730f

  • SSDEEP

    3072:4Bvl7rzKw9tax65g8fZzKd6Z3A4EqHi0kk9P4cHOCd1ratwvM+uLCDw1z5iB571L:wNnKbwR66Zw4Eo2kBP9d1rZO8IGL

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2