Extracted

• • Target

    d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

  • Size

    399KB

  • MD5

    3b8e8465c4d83abf59440cc038332808

  • SHA1

    7471a99122d9a91fb6286bd34dfa35ff446893e2

  • SHA256

    d93682cf14722d3d0885f8d684785c543a3e4a9e40e512d5ae4cad8bb3176ba4

  • SHA512

    12e4dda6d7f687b44280b0cbe4a433378cb4318203e27d37048fe48d658a725f52f55830eb0373a43bbc11b8553b383cb48ef71ff3c6b949f36bfea917451339

  • SSDEEP

    6144:pKKLS8epklmhmEN9gVjJXwZfr7iTPhXiaLa6DLDO1KQ1KQ:AKmfpklmgEN9eNwJviTpXi+a6D

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2