Extracted

• • Target

    8a843dd2a268a19fc36a9209d02882cbd0ed3771648668356f3e0f43776b8a45

  • Size

    304KB

  • MD5

    03b246905d294b3ea15e45fe43e87217

  • SHA1

    fec38c15549c6dc1b16af10da47c07211feff343

  • SHA256

    8a843dd2a268a19fc36a9209d02882cbd0ed3771648668356f3e0f43776b8a45

  • SHA512

    87abc9c129b4b895c850a1f037767ae127cd254c209cd22f52d993a7c5a2c1d8b534446b662af268ff95391d3b4880e5d78dc98c79be4ae5df16c56fcf5cd2db

  • SSDEEP

    6144:yB4D8xL0joBVkmOxugF+EFIZQOk3/+QIQWCLcFgqd1:84D8zBVkmMVvSG2Qd

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2