Extracted

• • Target

    1625cfb597a6956694a20594cd25e382bb9c66a121978f9b48b8ad7d3e976cc2

  • Size

    285KB

  • MD5

    10acd65ec9c330729fece0c2599c00d0

  • SHA1

    4105ddce737ad9cccb4e4efa4a19c293ffbe1273

  • SHA256

    1625cfb597a6956694a20594cd25e382bb9c66a121978f9b48b8ad7d3e976cc2

  • SHA512

    b0b1ba0afe2a2f70daecc2d278843f9259d60af9e7dae5f39ae90f6a97af4e77ff9a691fefc695edd4e3ed754ee46beb8f2500955e95de5febaa8fddb685e3b1

  • SSDEEP

    6144:4L/Cq04Ol9gzQFZzhyEELZdTXc3ITFbmG8uQTdJpHXd:Y/h04Ol9g6hXEL7c4TFbmvhdJRd

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2