Extracted

• • Target

    f83506d6903053d7cb3a3cf18fad72a0N.exe

  • Size

    410KB

  • MD5

    f83506d6903053d7cb3a3cf18fad72a0

  • SHA1

    af0b8a751245d26bc9ad61062dd0366027eff3c1

  • SHA256

    106f4196199e0bef0816cf89fa0f2b489cf633bd37a6524ad4d61015f2dc66b4

  • SHA512

    262bcd4c0878694696b0df25e3749223c476b0b5239a1a0573cf803bb268500dfca58907d9d716690e3bdd7056c6e311cbea292bdf99399b44339e56a75a1510

  • SSDEEP

    6144:L6dHwUpEuVLHBlvl949fsYeQogFuVBcRR8XIYLdsp2w4b+HGTWcPnkuG:L0wUpEAjbv749foQogFaX35w6+nknkV

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2