Extracted

• • Target

    9e379c719a9b404dcdc43c970e3e62b52cf13b0ef4497420f05775612fb4361f

  • Size

    414KB

  • MD5

    7579a342f52bb671ea38b6ec2faf1bb3

  • SHA1

    4af664d166a12d4be2f88d6160f20e3556de7ed1

  • SHA256

    9e379c719a9b404dcdc43c970e3e62b52cf13b0ef4497420f05775612fb4361f

  • SHA512

    213c2c360b92f96d07633bda19cb121a97ffa818a326fc7f82860e06c54cd52d23b317ce919c44813e1e5154ba734bf1c3768c3646b37760fc53eb57711ddef2

  • SSDEEP

    6144:tVZAZv7PWhvJi9rDieKbIdRc09PkWTUAcmw:toF7uhvJipkEc09PkbAxw

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2