Extracted

• • Target

    1f3c7bcb3093be3009ec574c0009e351eab1783bb519656e5553476d9ce320d4

  • Size

    310KB

  • MD5

    7d429f1499cfe97fdaeec8922f037f64

  • SHA1

    5776ff79b69f7546549ffa420d5f22242c95b762

  • SHA256

    1f3c7bcb3093be3009ec574c0009e351eab1783bb519656e5553476d9ce320d4

  • SHA512

    4bb284dd6dc61fe7ab66362a0f832d2c83a6e7c4af2f210a592ab0effa1b4277c76fee33828b4221c2047a479ca0023dd0335bb08f659474eeb90d2d0af8a177

  • SSDEEP

    6144:vIc1ARgH9xUs9w1VlrhAv7Ars+ZlV9CcProUMD:vIjRgdHZAscProU

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2