Extracted

• • Target

    d9ecc985dc6851bfa63b25841d0879abf248d50bd1e95efb45e6d1707813e3cf

  • Size

    400KB

  • MD5

    13d02c69763dece02f453669edafdead

  • SHA1

    479ac56d7939632af05c01cd505662ef8bfef347

  • SHA256

    d9ecc985dc6851bfa63b25841d0879abf248d50bd1e95efb45e6d1707813e3cf

  • SHA512

    a978cf62687e918054a2008b74de5e5b21bfcaf97e3bfa643e0f9537b623ea6d63ec5b19e424d5aaae9af4db3ece1e5f5fc3019b0f4de450bb0611d779ce538b

  • SSDEEP

    6144:ENqEEnHWfm10wV83SIjDHNnS0APzeessesXCgjqmA:EbEnHWfm10wG3SII0APzZNs

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2