Extracted

• • Target

    11730302b6f6bad37449b53c16ef8cf15d59fd5337bea1371da167ebffc8bbe3

  • Size

    299KB

  • MD5

    77063c6ba035403fe79008bf57979161

  • SHA1

    b308069ef7dd15702e4722fecdb7101a0d37f320

  • SHA256

    11730302b6f6bad37449b53c16ef8cf15d59fd5337bea1371da167ebffc8bbe3

  • SHA512

    14e4ca692da5cdd73ee6452940f79d40853bbecac64dc3d73f2a66001f8738fcbd548ac7836719620e4ec3c7927b597c29f90c107dc51c1d9469d867da37809c

  • SSDEEP

    6144:vbDEceeoS2fmwt7X9lbJ97wV9aA8dBoTce9/Me0Vdh1GQ:vPEnLS2fmwtzV9s9angHYVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2