Extracted

• • Target

    a295f0df7898cf15d20e90eda749f17dd8f0d7010684331434e84a06886af0e6

  • Size

    339KB

  • MD5

    4c78b099fe245602678417ed8e8dec18

  • SHA1

    4fd94c1d70bb1f6c655a64062d7885c80bccca73

  • SHA256

    a295f0df7898cf15d20e90eda749f17dd8f0d7010684331434e84a06886af0e6

  • SHA512

    0b9332aa4a298f5980cd50a714885d37acc6b4059b745c0c57d74b86591fab2e1699f19a9983541483b5fd3d57ee753739f045218db66ea7059fa41f718d57dc

  • SSDEEP

    6144:IL/b7irBTYwIe1f99rH/69iV/0obZe2EKzGsXA:ILb7irBnbfr+9g/z82zSK

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2