Extracted

• • Target

    5a6a47978b8c46c9e142c82f59f9989c9fde81960c446eb144da35adcc36b530

  • Size

    400KB

  • MD5

    423962a98abc4f72ce92334104e829b7

  • SHA1

    2016d38b8b2231fddb03fd9e17fb291f05247d77

  • SHA256

    5a6a47978b8c46c9e142c82f59f9989c9fde81960c446eb144da35adcc36b530

  • SHA512

    c3963fd5e7948da7c5e28a76879f6f113cdef07c6c0abde873b2466dee35c2adc5fa7be2eda650c0d289b28444651d64767d3c5c09d44525b330e1030f08c603

  • SSDEEP

    6144:O0MVHdfDeX7V9TFpBx8KSX3w/fdobFq5cyX7yb/zgOEdNw:O0MVHdfiX7vrBxVWbEY/i

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2