Extracted

• • Target

    5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

  • Size

    295KB

  • MD5

    6e3716c0a67dc70a318593daf25042a5

  • SHA1

    19f7e468a80a36995a71199edc7307b2dfced214

  • SHA256

    5ab1b5c6a038381191b0539049a87a825ba76a79a0b7c73da22fb7031202b41b

  • SHA512

    0ec466775d1f47425a12849aa803595fa196cf7c29e0a4a9171991f87d3a040d83bf623709dc92de72b2d7acdc6ddc91567555dc820b6b74e3c85bf2d647c2e4

  • SSDEEP

    6144:Q0DNVFqzDiBBvQk1fyIUhMUvhruX/76L/M40Vdh1aQ:QENVI3iBBvxfyIUWs+76QVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2