Extracted

• • Target

    0910a2551f84a1dc29bbe940e94319826c7b0a2831ae8531ea0555c5f169e101

  • Size

    325KB

  • MD5

    765e8d8db8297ac1ea15a92e3435645a

  • SHA1

    5e337c66f356e57f61fd89362cbfbc49a99a49b3

  • SHA256

    0910a2551f84a1dc29bbe940e94319826c7b0a2831ae8531ea0555c5f169e101

  • SHA512

    c2f9fa29cfbb960fd8c06112c86be0f13881c38706f18cf8bd414c3dceefbbede3554a9ec64717ce14f9a5368fac12b98d987ee419423796e549ae929dcdb047

  • SSDEEP

    6144:ofb1r7ArF3ZV6lL8x8BP+iBLdKn7wgTLYm/jtg/+M1ZTIauQTdJae1y:8bZArFDCXBPBlMn75Ldby+0TIahdJaek

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2