Extracted

• • Target

    2c0f7ad2d18de5ab5efa399bd50f0e412be8dafc08a67b8437d83556520a693c

  • Size

    409KB

  • MD5

    7f5c6e94f0f3958413952c1d2c7b9f15

  • SHA1

    2bee4db8b9456d8f648c398e2ee94402c3da6128

  • SHA256

    2c0f7ad2d18de5ab5efa399bd50f0e412be8dafc08a67b8437d83556520a693c

  • SHA512

    e7e392810de9bf23e64b8c2003ad711703e0228d779e89c780bdfa777a24d8b706e0ad44fd7173b0d2679a101fd3289042a7807e30f449c18d51f3556f91406d

  • SSDEEP

    6144:dqLQx0yxeKoQz0KG+f07Rggr1XJiQrS7ll+CPugUVyTUqhG7eb:U2ZxeKoQzrVf0NMQrSBEMuF8M

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2