Extracted

• • Target

    f49af8056a5af3e2f7ac84b62de3ac70N.exe

  • Size

    404KB

  • MD5

    f49af8056a5af3e2f7ac84b62de3ac70

  • SHA1

    ab7450a4076c3af3c51b0ea7ae231fcf2f573c29

  • SHA256

    aecd06acb8047ffeb825b9692de59d22c5ff33feedc637565c937a20165233cd

  • SHA512

    0cd8a1b0aaf9b8fdfdbd1f269fa9feb9c322cb883b120460e81960b984f780da1d77096a6f63a92abd140cfe81b5f3ac7fad0430cb72ae3e2cd75645be46a9fc

  • SSDEEP

    6144:XsyT6I4FQhpxTUvLTfSwYTeh1yYKdvXdU3Dd:XFTdppmvLTfpYTevKrad

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2