Extracted

• • Target

    e0c8ddc9e2f0d9cf61d5cff5815d5b83af1c7d9506051299dfffc7d94e0ac163

  • Size

    414KB

  • MD5

    1402c26ef1314a356173e247113c80bf

  • SHA1

    15d4788c858b5bbf8ac75fabed069302abbe9c9b

  • SHA256

    e0c8ddc9e2f0d9cf61d5cff5815d5b83af1c7d9506051299dfffc7d94e0ac163

  • SHA512

    c9a19bc52eb36b7579c2ca9858ce788051109bb3d4ad2ef4a624a442ff25f8e4f493ae584bfda218ac0dd1022185f2882075421bd2b32ee7f4833ecaf0e28734

  • SSDEEP

    6144:UVzm5v7IuUlw/yHjXwyd6+f45c6pZ/QSHpyT7M:UYF7IuEw/Ywyd6P5bZ/HpF

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2