Extracted

• • Target

    f615934fe70dc48b8ea23704a7f57454cc282cb74d4b30f8ae452412903f10fe

  • Size

    402KB

  • MD5

    571f20ba29dd2fe34084b2b07b0c5d84

  • SHA1

    b76dc5e630b30bd466ce6b5320ec6dcfedf317a7

  • SHA256

    f615934fe70dc48b8ea23704a7f57454cc282cb74d4b30f8ae452412903f10fe

  • SHA512

    3026dc2dbfb0b07550cc6b05bb017930ed0f9c164f33c9ef9964e7deed157e5482d34b0a0fed57ff42199454c7c7d4881c4b62ab72d8e80e442ffb69381338d6

  • SSDEEP

    6144:UiL91yOsX7IM0A1Z0CaSgGNWwSRvUctl/SDCnom5ROqh:Ue91yOsL/0QaPGMwKf/S+noIh

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2