Extracted

• • Target

    dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

  • Size

    307KB

  • MD5

    9dc3f76bae48a8f7602b725f5fd7ce06

  • SHA1

    373408e6d800ed4404f10a391fa5718a5c88db21

  • SHA256

    dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68

  • SHA512

    442451bb8ce061ded8097e65ebdb9c446e748eca9840bbd205bfbb86fd07e9b0dd7e4fc28547ab7b1b3410525de6f6bae2841eb40fed40752311cb3217e8ffce

  • SSDEEP

    3072:gYiuYbrWfxnSql2W4vtwsCss1YyX/I3oBXoD/hu1tN05MFB8sFB8Th:gxbqSq2W4FWX13u3u1T0h

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2