Extracted

• • Target

    14b027cc047db731cf85c0c9566efee0.exe

  • Size

    293KB

  • MD5

    14b027cc047db731cf85c0c9566efee0

  • SHA1

    c48f20a1e2a1373e48a50cdc20afee9f605a9c9c

  • SHA256

    6185dca82afc231e003000da31355b2a826a394eb6876f5fad184f6eb9c6bf77

  • SHA512

    dc94e3c7b02f35c8d9edaa2ababfa4f087f61f4d3fd93f239c3924610295ff55cb28913c46d90c50d5e51ed8d6ff410fb2061257dd2ab98117961a08f0981131

  • SSDEEP

    6144:EWNrAwUuw0YiutuPn4GoaBiNcj2DAhQ7hrIyD0/xQT:ZNrA7t0YiutVNaB7+AhgpL

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2