Extracted

• • Target

    a8acd63bcabc56235e7dd16b87e2a5b690b0915ecb052059c82e546b066b0659

  • Size

    322KB

  • MD5

    516768e4e704738daeb061306e17a4f9

  • SHA1

    5b3684f84b9ccca478ead16325c3bc64a54a052c

  • SHA256

    a8acd63bcabc56235e7dd16b87e2a5b690b0915ecb052059c82e546b066b0659

  • SHA512

    81d4fb47d56be265eb2299b2e605ff53e30ed15d49df30d7996b1638414794306be703774d92e375e37082f63762fbde940f3bedc4e6b26640f1f94774e54f5f

  • SSDEEP

    6144:hfb13/MHFWJBv+vAYGueisx6OOxbdbWuQTdJuIMp7:JbBMHFW3vvN6BxBWhdJKp7

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2