Extracted

• • Target

    0507db046cc1b16a8b8dee003fd92b68.exe

  • Size

    247KB

  • MD5

    0507db046cc1b16a8b8dee003fd92b68

  • SHA1

    35b700c5444f660c7f7e7ddf37d0426b0cac9aef

  • SHA256

    b8847ab80137552fb3cf73bdc522ba695bf7a20bf3a68ef02e940c2d10dc38ee

  • SHA512

    0cd9d164497c7ffaa9350d1c8bee5e26eb7c804868bf07dd821b8f71da8a997bb25346d09557efbae4c96f69f5be16eeed6f6e7bb573179b92a7d70835a5eb0f

  • SSDEEP

    6144:fYNBBE7SlVHBinHGQhmFMUHagyEMVfFGyxB1R1:f6E7SknjmF5HaR3FjR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2