Extracted

• • Target

    c886b2aa58d852a95d3e9e1f68ba7913278ac3fa31cde2b4947e93e6f751ad92.exe

  • Size

    423KB

  • MD5

    1e574c803a9a0fa1d042b3aeff1cb2b8

  • SHA1

    9c0f34945f89aa5c2a8db2c9269d507e17e09ede

  • SHA256

    c886b2aa58d852a95d3e9e1f68ba7913278ac3fa31cde2b4947e93e6f751ad92

  • SHA512

    6d1a82469a29f3a309054ebd3d55f033cd9fbe5391b9347e7be901ef6e0672fae29c845e2e9de383e1420653ee25e77ec413810e394fb3ab040a6a417d03a5fe

  • SSDEEP

    6144:m92HcDLKsEmssotEup5AfWJXQJSFUK07gOR:mMHcDLDnssotbqfwdFQJR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2