Extracted

• • Target

    8065d03f70f7c6e2109e42b6b9f356e20a23d4e1090e8e6c00fb3de8f3a0d91a

  • Size

    290KB

  • MD5

    5115daf5905ecda1c037ca29c2145939

  • SHA1

    a86a8ccce3e184ef5efc6073901ce7bbe9aef92e

  • SHA256

    8065d03f70f7c6e2109e42b6b9f356e20a23d4e1090e8e6c00fb3de8f3a0d91a

  • SHA512

    bddfab3b795de665f54b826319fbcd0b241fd06c61f669cb03042439a3faeb94fe7b44fd7468810b83731b95267684cc5d2ab11b1168fa7d1a97d1e706d1f687

  • SSDEEP

    6144:3NhsCXt9gLmr3FjR3hchq0+9M7MhJD2W:3NhswDgslho7+ScB

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2