Extracted

• • Target

    a76b0034b5dc727262b84b5eef2e473591fd293eb6d46767821ac745f45eaa8f

  • Size

    384KB

  • MD5

    6cab85940aac23cfda0fc509eca9ac91

  • SHA1

    1ceaa34f98e1895a0cf4835c559cd43154022476

  • SHA256

    a76b0034b5dc727262b84b5eef2e473591fd293eb6d46767821ac745f45eaa8f

  • SHA512

    0d48ab61231305ccced1b0167412f9ab9969dcfae80d99b2571696a8df867f7b207b7c627dfb44998385da935a9b1f081b04d771858e9e650ca54bd1cce3bdfd

  • SSDEEP

    6144:sEfnGfh6eQgRyYgUXGIKdTuGBpyfniUp9g9xvWPdBTaTUmPbQf:s4nGfkeQ24yGIyZBKniyyxvaJWb

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2