Extracted

• • Target

    8c55d689dfdff3c0e87ace5baaf075a3f80c7ecb61d658d345e949f9a28efd6d

  • Size

    423KB

  • MD5

    2ceaa3ee3ce6b01f30728b16eb1590e1

  • SHA1

    a81f3e6aec5686730d6c94c53d3bc3e09f42297d

  • SHA256

    8c55d689dfdff3c0e87ace5baaf075a3f80c7ecb61d658d345e949f9a28efd6d

  • SHA512

    868b1cbcfee92553307e5256226ffe92d6cc23fe7c30abf3f9ee3700313f20803f0fd45dbd808052b53c5549d628a55f17888f11241b89a86241b30827cfee45

  • SSDEEP

    12288:CLu8fqVx6678b1OfTwlOR/7hKDanKJLy:Ca8fSJ85OfUOB7ZnKY

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2