Extracted

• • Target

    320c87d33cc5fff2dea028fb34ab69840f8679f085b2bacbf42becbec0891aed

  • Size

    432KB

  • MD5

    4c4adc52426bf04827c80d0ac19de6ca

  • SHA1

    f12354115ee39e97fe7ec1136dd2d37d1b8eb4f0

  • SHA256

    320c87d33cc5fff2dea028fb34ab69840f8679f085b2bacbf42becbec0891aed

  • SHA512

    4d1db3adafda45149103756fc38a6db2f1b4ac9d3a073235f3f48d5f326a96e066b920aecf7b9534034a54f4583099f5d1de40d2f1eac4da48ca0429ec21b7d1

  • SSDEEP

    6144:e1tier8fUM8C8OF//cf4DAvK5Dz4jP5QGAVx9b07ENCctE1SP+28OK+lsO:8i+8fwvOF//coD5z47DAF06tE1Cpb

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2