Extracted

• • Target

    894ba799502ca5eac58d1e82ed1c8fac99a391f1bf676beaacff5e1bbde1417b

  • Size

    411KB

  • MD5

    a1ea1ffe372eb3abb1d20740719cf37a

  • SHA1

    32dccd07bbc77576cda357826fa36a74cd61667c

  • SHA256

    894ba799502ca5eac58d1e82ed1c8fac99a391f1bf676beaacff5e1bbde1417b

  • SHA512

    11bb26017fed54bf06a41f9928ad3a40000ba65d69563a669f8231169b76a17c477af9d1085f4b76e34bf182a4f8808ecef3739735feba55167f267f666c9f63

  • SSDEEP

    6144:0HH0YZLefozbE+9IquXOlBQH4Oh+zmeZq6:0ntZLeAfB9IjeOh+z

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2