Extracted

• • Target

    c0da3ea4d016ecf84a11d0b73c7b1cdcfef31391cf58c6591cd927acae83372e

  • Size

    295KB

  • MD5

    f82c9413e07313056c13db265b4ff06d

  • SHA1

    80c856b004083ebe777a7c4030d247d26cd7dc40

  • SHA256

    c0da3ea4d016ecf84a11d0b73c7b1cdcfef31391cf58c6591cd927acae83372e

  • SHA512

    3accbff6cc6f3fd95a14a687920aad9053fdcf01bebc911b975fa5b718b685bb88cc5a7efcb05ab7b7f7e74d358d0728ecc0478ddc5b5d8b1455619e6c8eb921

  • SSDEEP

    6144:U6VyfXc9rZniLw7BUDJ5/kDQwgxAu/w/Q:U9XurZniemXwgxAuY/

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2