Extracted

• • Target

    eb530e94908b4fb4d89f11a7a2198d0592c71f03d3d0eec8d3676b323a5fcbfc

  • Size

    294KB

  • MD5

    04c1971726f97686dab7f7f7d9eb08f5

  • SHA1

    c09e79d0d096643da3d2ffd410a3eb6096e07a43

  • SHA256

    eb530e94908b4fb4d89f11a7a2198d0592c71f03d3d0eec8d3676b323a5fcbfc

  • SHA512

    c114553508ef00cb1d4165e76716a331fc03a0d8246265e3d1a73d703907343e539f8efdbacaf7eac38f1443d32b9df0c50c6f98cbd6a6a0e7533771338b262b

  • SSDEEP

    6144:g+FTfLtFZ7umhzZwW/C2BJDaodzlr6QF/Q:gQL3Z7uyziW/JBJDao5lr1/

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2