Extracted

• • Target

    f2c40f2a1a0656d3666a0443486cf0452311f30243fd48b1b489448f158c2597

  • Size

    400KB

  • MD5

    20aee64eb5f74af09313e006b66c44ae

  • SHA1

    e85beab1a4fc1b30d8b3bf71b3bcbdfc59e14844

  • SHA256

    f2c40f2a1a0656d3666a0443486cf0452311f30243fd48b1b489448f158c2597

  • SHA512

    247884660a099486101d9d2df0582b40f516c881c4bc979a477f45bba26171ae5288e0aeec30d5d4379640106245d08615b9e2abbdcdf1a00623a78a852b5898

  • SSDEEP

    6144:MCU9HVfVe502sJQ62mp2XDHoB0ZakUgNx3COjao7MQRw:MCU9HVfk507Jf2mp2TIB0ZZ3CKr7

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2