Extracted

• • Target

    11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57

  • Size

    397KB

  • MD5

    f2ed62112a34067d971739425ae2a5ce

  • SHA1

    cb105188bac8cd7dc49914678e35f843a2bb8862

  • SHA256

    11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57

  • SHA512

    2fffaf08cef53d5f9c53dc22b8c2a1edec5896c2abb4acc9a6410a449ef015323330c73a9fafeec6c13376b3cdb210f75013113203da947f0c55f81f31e91e58

  • SSDEEP

    6144:U2I0tjaH3IifLQSITFrCvARkpQSlloN5cf3gFshGnXpt/:Ur0teYijQBCT2SUOesYn5

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2