Extracted

• • Target

    ec14337b3da817bee3d06a4ad266b382d849d633251f2a19894a40c471f8807d

  • Size

    285KB

  • MD5

    22d1f155cc1928ab851963fa83f63b15

  • SHA1

    fb5b1fcb310081ed4e897c768f1bd9297d1f399f

  • SHA256

    ec14337b3da817bee3d06a4ad266b382d849d633251f2a19894a40c471f8807d

  • SHA512

    9c88bcb7484ee0d4c9be437520448b1b92b84acff15ecd67714272cf13d08dcb61d0edb7e0db0460246af30fec00055dc0cfd0b93f31ab78080b7c9d215f3e0d

  • SSDEEP

    6144:JbDPUm+EJ+jzg6aqkqtc1OocTn8yzP3duQTdJrZ:JfOEJ+j05qgJyP3dhdJrZ

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2