Extracted

• • Target

    083060880ab3d6ec12f01af2f4cb948b342196de8c1ecd55e2685f80f00f6848

  • Size

    382KB

  • MD5

    df3eea8d70470189de7069fa02e73a01

  • SHA1

    b68dd135edcb20ee915541049480898b2fa2bd3b

  • SHA256

    083060880ab3d6ec12f01af2f4cb948b342196de8c1ecd55e2685f80f00f6848

  • SHA512

    d6d3e8f8f90377aebe74bb180036a5d3ab5a4f62b4e91ae75fd6dec884f12df95d12a20e1dc86e7cb66ce88f8e88bfbe39410e0c43c332bd3bb0644297c38c6f

  • SSDEEP

    6144:5IyXsmry1miiCMw4PoO4lHNY5t5w9mXiFH8v6PElqNZTb+els:5IyXsZ1mfd6lAPwDwYmCZx

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2