Extracted

• • Target

    f4d018bed6bd4e093b03501f4588d3a0N.exe

  • Size

    324KB

  • MD5

    f4d018bed6bd4e093b03501f4588d3a0

  • SHA1

    99ec2abf0d0e06c82942c5c66feb3734d409769c

  • SHA256

    a60e84798f50c0f059277deb575211cf6bb281a370839cd3712cadb50e5b5ba7

  • SHA512

    fec16d23693bd008c32517a5551414dae45a6fd06c2e4b845853fdbdc05e28b236b85771131c6d7c905519f47f0462049db3b4f4c4e908aaca1a209a2f4d3d45

  • SSDEEP

    6144:KeDq3hGbgMrFhKL5FBqUY1K0nzZquQC+XJPyC/MPj0Vdh1tQ:K2qgUMrFhKnNpmzg2+X5yuVdz

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2