Extracted

• • Target

    225d26dc45027e503e449bdf4c189c81a84c89c73fbf5634838e6d2847d73918

  • Size

    285KB

  • MD5

    a9ba74e3e542e965104c652efdf5518f

  • SHA1

    aa2c72203bf0afd7b3adff00168553ad39290995

  • SHA256

    225d26dc45027e503e449bdf4c189c81a84c89c73fbf5634838e6d2847d73918

  • SHA512

    ec63eb3ea99c6b1801a868262a74354219f5862707b729d06bde06d7734eeeaf0c980bcee89498d2267d7082e6593c955d8c0a0472387ad66f96f3b3ec1b4ab3

  • SSDEEP

    6144:Bbs/Zm+dR+u27z2ejvmej83EkVYuQTdJ2q:B4LdR+u2/EG876hdJ2q

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2