Extracted

• • Target

    4060ee2c82ef6807ae55480847849da0_NeikiAnalytics.exe

  • Size

    357KB

  • MD5

    4060ee2c82ef6807ae55480847849da0

  • SHA1

    839cbe84017915e3a312c95c3432a93485feb854

  • SHA256

    7d44d977642f0d53632057f6451aab21beb56a4c5887e55d0415b236de88942f

  • SHA512

    7804eb6127859fe7c0edb6423e019b9c963ffd1996c7e3fb2c812683b54f7b620ca536fe7d1c383367b8eed1fd9f0f8d7deaeb1a6789699c43fef8f74b8c411f

  • SSDEEP

    3072:mJFWfn45YWXGCAYcRO+oVfhDBXMq8sUJSVBuoEDlQuQaSVUrxvbzhOSo5OgjYxkq:mnWv5PbaZDBX2UB0DGakUrxvbvngnw

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2