Extracted

• • Target

    9ef60c7ca941abd85ad43062db61b5f67ce8aa070bcd23d37f063764e35e383a

  • Size

    422KB

  • MD5

    e50b99292f0017111fe1fe7e128fb254

  • SHA1

    6f420c3f5e5818d013d69a1f7427cad302deb70d

  • SHA256

    9ef60c7ca941abd85ad43062db61b5f67ce8aa070bcd23d37f063764e35e383a

  • SHA512

    878e7d9a8f4cdac6bf0e3b1a87979935b113d633aeffbbaa6a54c9b41a60d312624294c171c6ac4fce3bfe19e6ef98ce5553b45defbe3143e2d0ecb05d17c961

  • SSDEEP

    6144:1k3gyX30PRFDxCvduYO4z5UPYDPkbcGxCRJjs5ruHP6B:cgZRiv24zWPQkbPxCiuHi

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2