Extracted

• • Target

    8e9c16a18333e681b3bd87f838d906feb185b8d764dc9db4299421573cb9869a

  • Size

    254KB

  • MD5

    805fdf5ea872c5687293d5510ba67ef9

  • SHA1

    9fc1bf864515f6b01cdaca33ebb13b441c0c86e4

  • SHA256

    8e9c16a18333e681b3bd87f838d906feb185b8d764dc9db4299421573cb9869a

  • SHA512

    a45a3cd043ab92e2ec7333ca022cb7a606528bef64b5d0a0bec4506e4c3f87d7f77d9e7cd1b5ae7163c3e450b0ed445b9d3a282edab24d75dd85d419563279da

  • SSDEEP

    3072:3nLUmnV6UD+omre1TRvYiboazyouIIKj6Fek6/eWlasV3zwzZU5OFMQh1G6AMnbJ:XLnnV6Iare1TRvf03ZIIm7z/HlGFVdF

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2