Extracted

• • Target

    855178b8283aa8176fa145f7ec4526e93a93d16d918e8fb4498b9cc772b0adf1

  • Size

    432KB

  • MD5

    13b99c08710adb2280ce0cb40a06344a

  • SHA1

    623836ea5867ce1b6198929c57a77b08ed0b1ce9

  • SHA256

    855178b8283aa8176fa145f7ec4526e93a93d16d918e8fb4498b9cc772b0adf1

  • SHA512

    d82fb528bdf1aa57440299a78c34ecc80984f050da4131cf14a40e2d66b679df7ee60265163c9925e00d057edc4fa9356bd1a817a708110e446e1a6dde2aa07f

  • SSDEEP

    6144:j1TaPOEzf46bCPVvFvstUQsUjmFTjNEJpbfCtX8jLOK+lsO:BaGEzQ6bCPtKtlZhDbKtMub

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2