Extracted

• • Target

    0e794af2916c13f521cf6134a1d90b37.exe

  • Size

    333KB

  • MD5

    0e794af2916c13f521cf6134a1d90b37

  • SHA1

    76d0625a24e6033c93806d7345a7494e88623167

  • SHA256

    d37558506f2c695cc909fc5fee628f48c88e85055b83049f8d3e3bb6a67ddc5f

  • SHA512

    be62ad005df78d7f9c707672b64f049e71c4aadbd3f3362bffe298f82a687deafae58643262a698256ed2c9156a822b00cd185d43605e3532087516402e4cf07

  • SSDEEP

    6144:YqDbjsQW1yl+AvwJFnrSyPkBK/jg9rKtUJFI1uT:rsbolyrSvIs9rKtUwm

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2