Extracted

• • Target

    295ee98dd61e88593636362a4646a88588dad3412c0ec120c9431c60fb0dd1d1

  • Size

    400KB

  • MD5

    5a6081e8627ebc97257b9f45f9b44732

  • SHA1

    e983cc9a7fa454d11fe6707fd9ff9e3e8e928a15

  • SHA256

    295ee98dd61e88593636362a4646a88588dad3412c0ec120c9431c60fb0dd1d1

  • SHA512

    34419db8f6d08d2c86c98f2fe21231fa14449c66eb8461bb322d8a0122b24d35befd7e2022c013130860bc79460307f88084ef9a7ea855a714b974acefb4f771

  • SSDEEP

    6144:cTzG3+fP4fMy94Obs6CJrsWaF0tnj+UomfJ7mjKRA:cTzG3+fP4fMy9473JNaFqjWmfJ7i

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2