Extracted

• • Target

    d47eb960d7d9d59251d4834336cc412ec57845c396ba053a1a7da44c21217f85

  • Size

    399KB

  • MD5

    39507a6dceea23775ab99357556c12f5

  • SHA1

    1afcb7a4139677d360d3e57469ed9d0d0c5acfa7

  • SHA256

    d47eb960d7d9d59251d4834336cc412ec57845c396ba053a1a7da44c21217f85

  • SHA512

    fcc3b49b29742c32862dadd99c25fc5297c24670a5c66daaecce8dc605ac74efc11ceaa74a6e13551c29f52a46ec052bfcc3f53193d8676114cc2a6e4e78cb91

  • SSDEEP

    6144:OUesHUf0e6TMyrMo5aTyTWP/enp/S4ocAd1RvBooBcy/6jmRnHw:OUesHUfP6TjYIQyTW3EvCdDBoe/6jmt

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2