Extracted

• • Target

    6663965f684a51e116a05bb63c0706851130f59631507a0f3f4959588fb54290

  • Size

    404KB

  • MD5

    82cd197e01211f45bde6d38da11df156

  • SHA1

    e4f96f962a5e602b1f1834f0429edbc86c4b2b77

  • SHA256

    6663965f684a51e116a05bb63c0706851130f59631507a0f3f4959588fb54290

  • SHA512

    f938e33b0d4ac1d23c867b7f5eef7bdd488f6398fdfd009a1f6b3802296d4dacfb04b4471c9616877bc039112129cdfef4b1b61bf27b3ffb4d689379201d642e

  • SSDEEP

    6144:XjXxl562Hm3Gwbb/6rtg+O4jjATQwotWcWVHkzDLRc:XTxlgDGq/uNPwotWNkz5

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2