Extracted

• • Target

    298b615f97b36d6b46a664b2df69c730N.exe

  • Size

    494KB

  • MD5

    298b615f97b36d6b46a664b2df69c730

  • SHA1

    5588d15c5d6b4b4b34d6a2fdd3010c9401559b53

  • SHA256

    2ea8cea35b0ea91fabe87a7969b57c824e972b4734b167af69843c284248b4ad

  • SHA512

    e42222f9898c40c12e8c14cff688a7cf111abcf9528cc3ef86dfa100a574bcdd7b98c13e8076f88216f66bc0663287e26c95970cb4e895105abbbf113073a4e4

  • SSDEEP

    12288:PXyzmAnZNMql8BxUPJBAmGnd52ZWDj/wEP4vA3/AJZ:AnZNzl8qFGd5WW/pf/Y

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2