Extracted

• • Target

    828d1f0d5f63122595ba14579e1cd28e23bfaa5d03ecbcdcd0168e46fc2a9778

  • Size

    270KB

  • MD5

    68e6e04eb152d2e673b25d3adacbbc2a

  • SHA1

    5c1672bea07f217f6893c785f64dcf5f0c241cc8

  • SHA256

    828d1f0d5f63122595ba14579e1cd28e23bfaa5d03ecbcdcd0168e46fc2a9778

  • SHA512

    e1e4c7ee113c4846c51dfcca64b2ea4f9a3a5fc4ae3bc06c5ad73ea5f15c7a4d9ee1353bc40bdd34510c1c7ccd6a7c784cf69bc314eefcb6293d64636feace66

  • SSDEEP

    6144:doDlF9iyfOR2fLE3g/wG1pmBbZO5/MQaG0Vdh1JQ:dglFgYORkLEezMBbZOL+Vdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2