Extracted

• • Target

    49d274575d3cf8393711ba0738cd165afc46f5480d57a43b57972bba48ef03a6

  • Size

    345KB

  • MD5

    a5a14b31163a4c9991600fa08612436b

  • SHA1

    cbe157e0e4e1bb34764544bc1531bb5ed6e7528e

  • SHA256

    49d274575d3cf8393711ba0738cd165afc46f5480d57a43b57972bba48ef03a6

  • SHA512

    2cde2d6a873d4f72043089774db4d5207d4941a28640e5e8f536b2b3b7e9324fd9e62ad135ec4456d6b23ea132f1a61d04859814f25beb96bb8732b98be75bc4

  • SSDEEP

    3072:P0WropQLfkHsFbOqU5PEws8r6VSOIf+yWRd+JmIDvbJnOvlwMchQ8j/:P0SopjsFbuMwsrSOIf+yWRdENbJn1BQ

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2