Extracted

• • Target

    2fa023187ddc468439db40086c1a7460N

  • Size

    422KB

  • MD5

    2fa023187ddc468439db40086c1a7460

  • SHA1

    028ca13565678497f7f1638bdcf7af81a28cac8f

  • SHA256

    134632ee7c27ac7c859127e0814a3076e5aaf33fb2d3058a14ab7a973af3a119

  • SHA512

    9112fde9371c82305ca1122de52cbf6d742667c96191425f8468876ee75712a48da5b74209c8aa0bfb9d8365b017f2c10db9c24d3a233d0cb25b2ee71be37257

  • SSDEEP

    6144:vspWxDxtsNSiSRRDpOshFzcDt60aYVaVTSx1P8e/o:vuWxDxGKpMshF4M7Yqex1z

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2