Extracted

• • Target

    cc9b97672d32e3017c5044b48312043737a301cd4d861b97f95f184bf30a97ae

  • Size

    277KB

  • MD5

    8ff1a02c7c96c93cc812e7106ecf2fe6

  • SHA1

    6dc570c9f59867bc0451d839e3b761f5b24df7a0

  • SHA256

    cc9b97672d32e3017c5044b48312043737a301cd4d861b97f95f184bf30a97ae

  • SHA512

    2c4392b207fdcae45e867045186a981494affe3261ae049b0dca9c4c0924aa24d1df026efbab0cea6173f762944916ea0906f757df8f4fe5ab26817450d2c907

  • SSDEEP

    6144:pBoUgpj8IR8spQ/krnpobL4A3LWmCj0hTi4Q6IjRtIw:ToUgp8spHs4AbW4hTikI

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2