Extracted

• • Target

    90b72f3d8cca27b7667668bba38ffb01edcc46536e44625c38d3e7b62ce5b337

  • Size

    421KB

  • MD5

    737d441486470c721bb84fdb6d174863

  • SHA1

    02fcf8e828233330e31b5d697e1b470ae7c47e1b

  • SHA256

    90b72f3d8cca27b7667668bba38ffb01edcc46536e44625c38d3e7b62ce5b337

  • SHA512

    bafadabda297f975121823b33cc9a1132e21c609d1c133a69492934d8b75b60f52b5f4edc005de1525b39b0f0a95f2a65b0b56e8b6235f1afd483d85c5a2e640

  • SSDEEP

    6144:nkJgyXzgklgBJ1fvCkBViR0na98RWYsnc1/Iff0hW8VyHP6B:IgqlM1fvLViR0aWm4QRHi

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2