Extracted

• • Target

    539f00f5a8167e37dae485a21d3ea77505eade0fee65b452b808aaaf1777ccac

  • Size

    294KB

  • MD5

    a372b929b61f1181dfa7047559a264aa

  • SHA1

    5bf86f3cef79fa4a693a9acb25cef1928cee4949

  • SHA256

    539f00f5a8167e37dae485a21d3ea77505eade0fee65b452b808aaaf1777ccac

  • SHA512

    59b4674d325e176481fdc98489c6078f681d3935b1bdda8c5bfd428bd16d88b8a83d27c3ed0dbeeef4ec70b4cdaad82a15da5f5e9cc5f0d23fa1b84e41dcc13b

  • SSDEEP

    6144:sfDaoUiX/Iorz8t/J7PiDnEIj/MLRw0Vdh1tQ:sbaozvIov8t/J4EIu5Vdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2