Extracted

• • Target

    9867e4da8ee9890ca58d271c93a12829fe84adb0f11832ec9002c3564c1365f6

  • Size

    295KB

  • MD5

    5403278cf495b3f97cc5b10a212b6aab

  • SHA1

    407a6def97230edd4cbc3f2f002dd7bbaf39132e

  • SHA256

    9867e4da8ee9890ca58d271c93a12829fe84adb0f11832ec9002c3564c1365f6

  • SHA512

    ab842684bfa3e659b93c2d2b9db132bb5be37bd43620562fd780ee59cd045985d62d03012df90c10a8ce30c5667a4c20e8641d8db75c444908abefcb27fcd5b9

  • SSDEEP

    6144:m4jGfXCB5anjidxSc59ZaoGA/R8nB35q9+RASArngOS+pKT3E/Q:mlX85anjMp3FI35q9+RASArngOS+pKTG

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2