Extracted

• • Target

    126c47a436b70e43e6515330dc1b44f974570d6738f3ed63481df6d6d1fc79a6

  • Size

    404KB

  • MD5

    bb2669090265bbfe8f00eca665913e06

  • SHA1

    b77ff15f3c6690cd0afcf66f188a5b2e491a5606

  • SHA256

    126c47a436b70e43e6515330dc1b44f974570d6738f3ed63481df6d6d1fc79a6

  • SHA512

    f598eef8ef44f70f28e020a5d5c965ee4ddf8cf548d483a8b5dbea28227f153b9bca504cd20bf855e6b61f81219a7fd9d0ae87675e0687c47d5eebd3dbf6a523

  • SSDEEP

    6144:y3KjsVdUbbzx1a3npEEGcgWTAu7YLWvfy4oq:y30sVGPzxcX3lT37YLUy5

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2