Extracted

• • Target

    04037b5f379cdd8cf9f4bf3983a714e81f0e118402587d6144a2d0ff5a34b50a

  • Size

    250KB

  • MD5

    7b920e60e0a91157f785214e15a72c11

  • SHA1

    1a7b0b78df6a533e546bf8b54ee418fdc9a03b2d

  • SHA256

    04037b5f379cdd8cf9f4bf3983a714e81f0e118402587d6144a2d0ff5a34b50a

  • SHA512

    ab7a8394203ae40e9542b596c3c6d500dcb2f0daa93a3d033ab09291f0e3c90f560dd9d48a61832c49485f92de85cb92060899542be038a9a4c2efedb978c3ed

  • SSDEEP

    3072:Ini7ju0gKaTMkgl7SN+DZ/Tx8O2yx5BrExuDHhZYvEbdF8/ykC7tRO1wLiIoqtlx:I4CFv6eNhODx/+urLdF1RjiwUo68T3Y

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2