Extracted

• • Target

    d562d4a8d9671510cc3b18b4a801c48f826c9c6d809c73cdaf439a22806f5cf3

  • Size

    371KB

  • MD5

    b8f78e5944ae278d57653a7254a3a2ed

  • SHA1

    4d87c6b9e19d61368c56dc8ae017a32d6a5ddcba

  • SHA256

    d562d4a8d9671510cc3b18b4a801c48f826c9c6d809c73cdaf439a22806f5cf3

  • SHA512

    2eebd0c7d8f2994e781f18129d35dc44ac6ad9f24b8c8dc733ff9ca3ef713849c87a740a85d88096499db11fb3d3d9319ae7b8d93f89fdeafbaec00b49f6b23f

  • SSDEEP

    6144:cNpP8EJzxFt/Ml5KCm2BhaF3fHOPgviLwnRB:cNF8EJ10lwChBIFvF

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2