Extracted

• • Target

    758ba2e8ed6e7ecde55b15e7930156e1.exe

  • Size

    257KB

  • MD5

    758ba2e8ed6e7ecde55b15e7930156e1

  • SHA1

    bb3b924d45e7fff4f9cc2b087327643250a0e026

  • SHA256

    2f6c256196127c2b28211a50f2c9a69f50226506fed6b1a528eea6574a2d0443

  • SHA512

    b9c79ffc42927bbd7d691c3b83cbf793b4b74dd6cc59a34f5b051a8ebafabcc34b1f49c021e2b6b1a7b6f230c9b1a5622090d48325dccbdc6aa77a949877937c

  • SSDEEP

    3072:1EUdDlqVs1ZBmJkZTOlLc7NLV6NQTAseaZJ9h0k5Im7bYgofBaD7Wh8Hg:1EUdDlqmfBOyOlL0INm/bQg7Mh0D2W

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2