Extracted

• • Target

    a1b85d8af74805b06c0738f0d891aab6bb9fd75a3d9c87d1b0f23af1463fb179

  • Size

    280KB

  • MD5

    cb0c7fbaf692a97c222ff428aac49c56

  • SHA1

    c760155600a9b403cb5a7084d3191ef0ed28a22a

  • SHA256

    a1b85d8af74805b06c0738f0d891aab6bb9fd75a3d9c87d1b0f23af1463fb179

  • SHA512

    bc201aa4b14bd0d0aee3fe32cedf6246ed8554aa43b42dd54aaec10fca3a9e73ee70507b58742bfc855a8c5e5a1fa7640798bfcd794859ebb785edae597dd27e

  • SSDEEP

    6144:xwXs4RYR0t+Xiz7D7A7+JB8v+wPro/X0:xwVRsSPB8mwPro

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2