Extracted

• • Target

    6c10c6befa2ed075af8e443d10715aadfb5c01e9161317584a5429a69bcd4e98

  • Size

    311KB

  • MD5

    b0d985f94baf83124702f65dd32c9a32

  • SHA1

    a0bdf12cca957ba14a96ef7b59a033ee14f98f89

  • SHA256

    6c10c6befa2ed075af8e443d10715aadfb5c01e9161317584a5429a69bcd4e98

  • SHA512

    0ccf5d5e2070c79396e31e991097119b2ef46e2af43e41c407b87388b3e19a4dc4fdc974953c864e654fee17e68ec30e35f36a73711eb6748b611417b2866558

  • SSDEEP

    6144:KIopxVqUt3EgyNXLhcQORKft7RnXdProV0:KICVqUegyNbCU7RnXdPro

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2