Extracted

• • Target

    dc4fa85e31628b0d198397cf9c3b0c4d81a4a0a228d99ccfc00f2014c519f9b5

  • Size

    399KB

  • MD5

    3b48a1c694ac54a13dddd809ccc0c3f5

  • SHA1

    55d7ea8f37ac8206f70fd8e2cc47395633abe495

  • SHA256

    dc4fa85e31628b0d198397cf9c3b0c4d81a4a0a228d99ccfc00f2014c519f9b5

  • SHA512

    d63406e20ae77bdad9c9b06d426db00386c7bc1e1af3b28fd12066e22090cafde130dc7fc78e17ada0ec2945ca224614710ce5af64bf9429684f7cbafb5afdc9

  • SSDEEP

    12288:r5S6HYfKTG0981SYJZ3vjWOOGBaGhFCZ:rgtfYxMtJlvjWOOeI

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2