Extracted

• • Target

    2ecdac220249b69a103a73a3a3d1f450N.exe

  • Size

    394KB

  • MD5

    2ecdac220249b69a103a73a3a3d1f450

  • SHA1

    cc00bbd208c17b66339ff34e3848c0b9f0c67fa4

  • SHA256

    9b1a0d63c7ab084c006aa4c7d7ed7c43ebaa5455ba9630f152d8c46f5e1a553b

  • SHA512

    2b900a2b9c13db5c1e2d7cbcb218eb8f4656c3d93c06d44ad9674a7e1f4f353a626838bdb250f109bf4c0f6d40f8d86d1d83d8bdad1004ec2f5ff2f3eab29b43

  • SSDEEP

    12288:aLw1pykL6YwD3ya7UBw/pdAfMggXrVzeO:aVkL6YwD39ympGfMnBz

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2