Extracted

• • Target

    d4ad9ccbec1ac90a6030ee7aed785a7275b6369a49ac825d144452e8d751be01

  • Size

    299KB

  • MD5

    a75147ade71980a4b3c7e21dec154841

  • SHA1

    7ad3f946efc26afdfbd76035570c8addb4c1aff4

  • SHA256

    d4ad9ccbec1ac90a6030ee7aed785a7275b6369a49ac825d144452e8d751be01

  • SHA512

    603ac8ef234f23a1ce6ab5b62cc100ecb0a9c0519050257fadc31afe118bdbd3194265cbdc0054aa5094cfedb3be6024f66c350f2b7953a48bf0b86b3bc41814

  • SSDEEP

    6144:ppDUYxOOoC2rftC1CKuX2+wNYoFmyi34L9shGb/MMx0Vdh1JQ:pVUHbC2jt3KuX2+07iICxVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2