Extracted

• • Target

    1be51b148851e6f2d166229231341832ea90960283558c0c78453485f4fc22c4

  • Size

    353KB

  • MD5

    0a7e53c2adff3d1736b90e127819dbe9

  • SHA1

    384afee530d2a645015b74fb39ce3667bff48c04

  • SHA256

    1be51b148851e6f2d166229231341832ea90960283558c0c78453485f4fc22c4

  • SHA512

    d6d5cb5de6f1effb4ad8c99db1dc2fc0e45cd063e1cdfd90333c542f3d7cabd10d59fe6b5d96bb72425d7b2cb26e2b728befbcfe9f6e821677eebdd36526a9a8

  • SSDEEP

    3072:/KMhq6JUVKRwox4jmVrX20dlqBT5vJI2yUzmmaP5QveRM3N3VES+vxNn/5vgOcc5:CMhlRhtX2RBT5vdUP5QveolAVtgsumh

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2