Extracted

• • Target

    b1b5769191356a5d4fb8293f070e519206d24b355e5a149693c8bc4692f4b3a2

  • Size

    384KB

  • MD5

    d307f0987200f880b3eca3923bde2dea

  • SHA1

    9e4d9a05939e6720ae1ecdff91b63c19ebaec493

  • SHA256

    b1b5769191356a5d4fb8293f070e519206d24b355e5a149693c8bc4692f4b3a2

  • SHA512

    bf4c326acbc2c09c8de62b9e9170d4f8d77a6ff96150410bbce73f93978d53e975303a61c86c751fdb7fe3c342d63fd480cdf21eaefa3d25f17710a69ca475cd

  • SSDEEP

    6144:uEXzk02epMYWz2mxinarojXRkK8eSzfr//D2Z98hD2af:uv0RmY42mgaro1kKMzr/SZahC

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2