Extracted

• • Target

    2ffc2ee25338b8be01f8761ad701687dc7341b24cfbb8ac632d977d57aee2954

  • Size

    247KB

  • MD5

    eece794689da249b313f0a7eab9318db

  • SHA1

    39242196a46638791aea64b21a82aa8c02bb3aa4

  • SHA256

    2ffc2ee25338b8be01f8761ad701687dc7341b24cfbb8ac632d977d57aee2954

  • SHA512

    7da77f047e5299545d28cf07ab2d44ff50cb8594704f432cf258118e8abd5851fc3d4f2394e7eb511ac5256e71fcc3b346ac1aed6876470849402317b36eb2f3

  • SSDEEP

    6144:x6NBBE7SlVHBinHbZBaez/L4AJmrpCaxve:xcE7Skn7nDGpF

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2