Extracted

• • Target

    5a05614cece645db1474149b29f0d42c1bdecf78f1ca2dce4297d93240f6376f

  • Size

    391KB

  • MD5

    782a2cbff7f8f1329c0ab22ec923f531

  • SHA1

    29665a0010be53cebc73f994c52dc08ac4d4729b

  • SHA256

    5a05614cece645db1474149b29f0d42c1bdecf78f1ca2dce4297d93240f6376f

  • SHA512

    8b57af74cfafe20185a60e4bddea55d0da43f9d6f74c7be6c9aadb4499150694301ce5075e254892e3862d780176ba652043786456c8ba34b2095f154a57c3cc

  • SSDEEP

    6144:2lHF3QArzEaBR4HUe28DtEImTATL5Ny5lbMQnjD:2L3NrzEmwDtEDsTL5GKQ

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2