Extracted

• • Target

    d1748609d41c31a8e7acd601e6d15ffea9500cb91fbfe5efcc7a3f52db6506dd

  • Size

    352KB

  • MD5

    e36c47d5e088672fd7e6b6648cb24774

  • SHA1

    6dd9019351b8db00d17c87d7e30243e1ba836e9f

  • SHA256

    d1748609d41c31a8e7acd601e6d15ffea9500cb91fbfe5efcc7a3f52db6506dd

  • SHA512

    6c1171bfd2d403bccdf01db2e6fc0e9f97314bf3f464bd6a47dc1a550bbb44dfcc9f640dd7f6af2416b52ce2022ce055c37eff1faadaf05e03571a7d86d4f270

  • SSDEEP

    3072:jQiFIngBWqxQoYkANroId+3qrf/OJOLnUl9i7VPQb96VP6a1P8q0tHB1pgaJm2P+:jungsrZdm9400SGF+x0ikoHKMa3G+T

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2