Extracted

• • Target

    f2d86b122f7f55d1745af8c55de2907aa2e4b602a78d28ccdcd0b9cc9be6ccea

  • Size

    422KB

  • MD5

    d8f063d207f214e0ebbefcdadf6d9ba0

  • SHA1

    11a85940ebc9713c6f458d8cd2d47711d45a93af

  • SHA256

    f2d86b122f7f55d1745af8c55de2907aa2e4b602a78d28ccdcd0b9cc9be6ccea

  • SHA512

    f92cc4c02411bfa26986c049ace12ffbb0f88b896ab98fecc84ed943ea21c558db78abfeab8928e5d6b115e76cebaca2c8624bd2724964393509e90e564f5efd

  • SSDEEP

    6144:DjXMODAMsTy9X2WKyyr1BE5EMvOa7XHf7fKbDJfq6U+t:DLMODAxTqKyyrYXFbHf7eDJJ

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2