Extracted

• • Target

    37c8502f5be6243de18cb2f92e2f88d72c14cd7bffe96033319f2be9bed1baaa.exe

  • Size

    272KB

  • MD5

    49a530d2755b919dee5bdd26d931925c

  • SHA1

    59440163bfd8c6af7e61a0b19f86a91e99c01d98

  • SHA256

    37c8502f5be6243de18cb2f92e2f88d72c14cd7bffe96033319f2be9bed1baaa

  • SHA512

    79c89aac0dc0f40fde34e7228554982312ab10b04cfcedead34ace4a9c366aa027251a60c73a1815c3770fd87b2bc49b5c89ecfcc3e7815222bba8bd1a3ceed7

  • SSDEEP

    6144:+DfD5BQnup57iPyrbaM33dAq6EuA72Igq:+7Qnu+yrbaMD6EuA7

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2