Extracted

• • Target

    U41EHY0L51DESQ5S1T59P902Q059L4R7S7WCJSB9DRAAAUQS2Q

  • Size

    403KB

  • MD5

    52bd319b1c6badb57391d9fc1aa14ee2

  • SHA1

    b7f67e2e5229a2599ddf5e34599a23dc94cfa010

  • SHA256

    da5de27c10c56815fe36a1eb04ece4516dbf7b00fab7eacd3e5b6ee1d0adbaf0

  • SHA512

    0b15c8fd773990f57ddde6b77ec17bd32dd0692738adf243aee443b39711e5a9c16dd72f5354207066474a187dc45e2f0bbb3bfe913d4ebe52e9d07ff5771492

  • SSDEEP

    6144:WxT3MpTeClSYA/RsIQvVSHMu38VdRcVX6:WxrMpTeCMYwRsVwgdRCq

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2