Extracted

• • Target

    9a78b64258f92758181308bf700a48e2.exe

  • Size

    404KB

  • MD5

    9a78b64258f92758181308bf700a48e2

  • SHA1

    21f5459335a6920718737a8b3bb69070c1c57bf3

  • SHA256

    c0e34561ec76a6668d534f3f9e4b5e6438674cd7f3d3bba2459b3622ed8d6c50

  • SHA512

    a1ca8d62c7cc31f26a1b7137f3a2077c0b5508ed740cbeee7ec4e324ec06a8467c1be6e8369f32f484bbf1135febe996e52efbfcd9f7770b511bbe870b69f107

  • SSDEEP

    6144:vzygTYcJjvqoUWd1ci8SHuImXxeCu9FhdOMtX:vmgTYcEoF+SHMXxlu9FhN5

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2