Extracted

• • Target

    2f2831189080a96110997141986aa9f145e519066ac2e1fd26bff6f33e6b5f78

  • Size

    351KB

  • MD5

    71b434aa7371b799de02965ec75cbda3

  • SHA1

    66a4017c57882d39b555c6f2cd96591034d96719

  • SHA256

    2f2831189080a96110997141986aa9f145e519066ac2e1fd26bff6f33e6b5f78

  • SHA512

    45c94bd1b22651234917718d449b9524956a5cbf84784e2c9f865cbb8130cc9caa9e5f0a8706ac4d3c7ad4affc194ea18a8d9bbb17ab43b163344001125756ae

  • SSDEEP

    6144:yaN/f6Hmtc/e3JFXtEmGUj0/9B0rYYS/8XGcgWljoLozcnR2G:yaNX6G6/kJzGBsY8pgsRmn

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2