Extracted

• • Target

    6d88be0a372a2d9ea3fc76f21744e2388799d720f7dafd90b02c37fe711f5e9e

  • Size

    384KB

  • MD5

    c5a9914a3585a62df22313dafbf4ebb6

  • SHA1

    26314d6e33892dfde0564387c4dba8f877b4c7c6

  • SHA256

    6d88be0a372a2d9ea3fc76f21744e2388799d720f7dafd90b02c37fe711f5e9e

  • SHA512

    d512640ab1341d1e1403a5adf0435effc05d61701daab0b1375c66db91ea5490f86bb4b6533626bd6a807009d3526faa3947a028194d1975ae2bf712e0ff62db

  • SSDEEP

    6144:KFbyn2y4L6tteUA5p2X9Ng/jVqEur8PfQdvIOujTB:Ksn/4LArA58w/jVqjYPfQdv/s

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2