Extracted

• • Target

    78a63438d461feb4bc08815780426f4426776407c09aada3622033d1f6d3c293

  • Size

    357KB

  • MD5

    a07fb89e0682ebe5081b234c07c26bf2

  • SHA1

    25bddc09e76a4df0a28df2caba22a5a87ca4f0ed

  • SHA256

    78a63438d461feb4bc08815780426f4426776407c09aada3622033d1f6d3c293

  • SHA512

    7e9964f5a6371dadc14d2aeca1d3ed2d19c2938eecf3f0f56fc009b95a70ed069ed12e3a9c546c758a12a36f360980b6d4b8b81c4eede0d05406bc121fd1557d

  • SSDEEP

    3072:e90unpUrdGeRge6a858FrZdUhlMTtYFtHsOWcluJdOjCnXeyQvlN5O2+/xuU9:equpaGeRr6HCFNQqoHwcluzOmnu3Ot

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2