Extracted

• • Target

    e267b3d7ece1616f74c5b7cca4a80350N

  • Size

    399KB

  • MD5

    e267b3d7ece1616f74c5b7cca4a80350

  • SHA1

    61b81ec2e4315d3cec2f09e378ffc1babc197105

  • SHA256

    84b4619b20733b381b174dcc42736d213041c1d5f9abc0eaf9e8ea46ab64281a

  • SHA512

    608fca0fe5c3d187cc1aec6ed89a81303d70cf42a8f7e780c3f781bbdbd35d485ef6722dadcd908031797eca2bc7188ac4bee5bcf837c2da6add4ddb1f7df785

  • SSDEEP

    6144:TtoOr36fKef2vsbPN3dPyGfYoUQrJdXTxA:5oOr36fKef4sx3dqGgoUQ3X

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2