Extracted

• • Target

    394717be52282b63736acba053410269966823a0f491dc1dc702fbde691eb680

  • Size

    299KB

  • MD5

    705f66a9f7ed4809f5e070ed1e87775b

  • SHA1

    fd886da365149939594d11f4c608f3c3716cadc1

  • SHA256

    394717be52282b63736acba053410269966823a0f491dc1dc702fbde691eb680

  • SHA512

    8171b9d55547412484e00115d8dc03489c7f463c8f70e4e20a57cf868792f8c037264526021d1ad9045b3b96a8cffca2ad4b03879501e49d20758a21d755d39a

  • SSDEEP

    6144:q4DEceeoS2EPFdTS8q1VCYnt1zx/8K6f6ReViXFi/MzX60Vdh1GQ:qQEnLS2EPFEpq2EAUViXFxHVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2