Extracted

• • Target

    506e0670b1fd6a2fadb4dbb6bbb40436228b76989e8d0c73e0a31cfd65425b57

  • Size

    305KB

  • MD5

    992e197904f174367e42fa0dff79b9a1

  • SHA1

    3b5378454dd1189abf1f21d2eaf39aa2ce185e56

  • SHA256

    506e0670b1fd6a2fadb4dbb6bbb40436228b76989e8d0c73e0a31cfd65425b57

  • SHA512

    23b292ddf14a50da6e8e8c3f42c19875a67673891d6b88c989488083bcc8f186b419e4fbd266488dab42d4334ca03afa173136cd9291f0a6482fef740d5c988f

  • SSDEEP

    6144:HBgQgpT8TUdXjdUWX5WAuyT73eWeb/8MBhhngqhc:hgQgXdTdvJWIT7pebkkM

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2