Extracted

• • Target

    9b45d116e32bbccf67f0179b0ed4be4c1ffb3bed792e37478a23f0afcf9d1980

  • Size

    423KB

  • MD5

    e53e00b653e165a52b59596e473f0732

  • SHA1

    3ddfb7257debb8ee477d1d98d0a602bc740e4b07

  • SHA256

    9b45d116e32bbccf67f0179b0ed4be4c1ffb3bed792e37478a23f0afcf9d1980

  • SHA512

    b128718125356e90388d619ab67a7b2b0a252ff7205c4869975ea9878f31c49693411bd9449beb4f39d52259c4587cb5a8df0e897ff34e7b0b1558426cc27656

  • SSDEEP

    12288:rxPJGZfVBlFcPi6m+Vzza5yocJRxzwEvEwk:rDafNFcPFuaNwwE

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2