Extracted

• • Target

    e5fd67a9b4d65ce3c03b1728f0783a15ff8a85b1c8d5c7e1abf5ff5d83e1bb5d

  • Size

    305KB

  • MD5

    35ff4a3cacca7f69a41ac5989b4b9484

  • SHA1

    954f19c5346c4fd5377621c437bef4c92e67cdb6

  • SHA256

    e5fd67a9b4d65ce3c03b1728f0783a15ff8a85b1c8d5c7e1abf5ff5d83e1bb5d

  • SHA512

    0c876ab558a51080cafdbd84df1ee637d8b0dc0efe0a82552a1a9cceb6f77636c4fe914c520cdc492545d49a8a4e485864795bf4f549c5256b6fae0b2ecf1612

  • SSDEEP

    6144:XBgQgpT8TUdFTD6eceQ395NKLlujnPoEOUVuztfbgqum:RgQgXdFT5NQ6qngEOUWt

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2