Extracted

• • Target

    0d4afd2cfed2d28a10ab663aa0c51f4b60d587b49020893490c5db7cbc9d0a4d.exe

  • Size

    370KB

  • MD5

    fa7383138b89d723bf99d6b40e9758ae

  • SHA1

    32b4bb823a8decec83ff94f5bc944d3501c6a4fe

  • SHA256

    0d4afd2cfed2d28a10ab663aa0c51f4b60d587b49020893490c5db7cbc9d0a4d

  • SHA512

    ba17701e8c0014adb1d34e202523561217aa3d4f0fa2d3c753a2f42fc076baa0d4759c207d3112304d678a5a79643c67442a6b48a55032a6f1a4c7afc2d6b688

  • SSDEEP

    6144:j6N7kOswEGuk80dNtHJpqkRMzGQLDSvTH:KkYvpfBCaQL+H

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2