Extracted

• • Target

    e0d6620f56005133a7252198c7a4780664b43c91d347097594825bbc7912ef95

  • Size

    401KB

  • MD5

    f014dcd4c617fada93c488f904d3e753

  • SHA1

    cec49207704f871f054c315d9f392b96f70b2309

  • SHA256

    e0d6620f56005133a7252198c7a4780664b43c91d347097594825bbc7912ef95

  • SHA512

    5a6ba6c628276e2033d3b2793f8575f4e5f9209cf4b61c8e958e38267910d8463fe52a58a02ee4775900a41ed183158759b46af1b52af31da9d9d0da4ae866db

  • SSDEEP

    6144:X4DbnS3TfbACSU6IRq8LrG5Iu17si6rgBN1aaZQBti0VHf5XIIA:X4nS3TfbACSUP9W5Iu1vnrCti0VHf54

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2