Extracted

• • Target

    6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

  • Size

    422KB

  • MD5

    8d577a901d3bc4d5d84cfd938cfefe3e

  • SHA1

    b96e97a081ef328b6b22d76569ff06ee8f2472d1

  • SHA256

    6a1af23d03fbc1a0fc9a1548b254ea36276e3e5ac3de2f4fdd4f3ddead421999

  • SHA512

    3c3e3ba1890561155746a8ef65bab606be14bf02b3c2b5f59ffd890f56037a356b0deafdf7c748cbe6b79370b0dbd2b9fe38515c62b6fe14aa2855bb2eb2a49e

  • SSDEEP

    6144:mP+lSXQSvJaNuY41WxdQWvJpbp6csssruC4x6SI4U2401iHP6B:/lYJZY4QxqSf6KES9UaIHi

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2