Extracted

• • Target

    2493063430382044c50ed39315a66719d3d0a86dc5b7c6edee61747a14b5a30a

  • Size

    270KB

  • MD5

    3345caefd541b19aac8bf440abe799d2

  • SHA1

    7da1a2f7e13870483be125e4aaed9ede857358cc

  • SHA256

    2493063430382044c50ed39315a66719d3d0a86dc5b7c6edee61747a14b5a30a

  • SHA512

    fcb6422ed1a82b85491f267ec4c323e66c7555128499583cf0154f177642ba3a3fcf5b182158cc7d09ab5337c8728c8db0ff9775e5f9b2612d92dbd4cbd8095a

  • SSDEEP

    6144:FFNSfX3ksWx1TFyFXJMuGlUgBihDxvig8UZCEK:FSX3ksa1hyFJMVlUeix1iUZCE

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2