Extracted

• • Target

    cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b

  • Size

    324KB

  • MD5

    de39d38f871167ed066a9d6d3181e2c8

  • SHA1

    c96c26fa89852023fc2d7b39e85c48898444cb90

  • SHA256

    cfe279a9e9ebf9b9a0bb68a1261aa94d8e8f80e18204d647b0ed853845e1428b

  • SHA512

    b7c6e893b2c730efd513cbf37dd2a00f87f67d8001f75ba423f992fb0c2e47f93e9ad35fc677ed1a35f60dffd54923480d9ddbe63ad19c7323bf2fe9cfdad5e1

  • SSDEEP

    6144:rCou1DxtV+m2SpmzpOIfyUz/5KmQ4KfhrShNw0pAY/M0z0Vdh1tQ:S19tVd2SapOIfr/ol4Ahryw0pOVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2