Extracted

• • Target

    e9c7f926c3040b05ee3a575579f26803a238357f3ad1543c4edb78c49af923d8

  • Size

    374KB

  • MD5

    91dc8e4bee55d4ae14d13784cd712cbc

  • SHA1

    28c247927791d5115a420a28df80f373f34a3d34

  • SHA256

    e9c7f926c3040b05ee3a575579f26803a238357f3ad1543c4edb78c49af923d8

  • SHA512

    cc3878ee59b42cb01d53044e9d8c91e5d5966efc59bd3022ab9fc67afd859107409970d3cd6248eb33016455a7f89eb64ea04e2b281ac597a395ef617145a43a

  • SSDEEP

    6144:SWv5uz3ojFc3wBnhAvBLdy/NNBLPG6GUWZTb+el:SWvM3oj+3wLOLdyvBLP1tWZx

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2