Extracted

• • Target

    cbbc463765d83301e3d9c45f8acea140N

  • Size

    383KB

  • MD5

    cbbc463765d83301e3d9c45f8acea140

  • SHA1

    d6759a1abc74f2b2f754c060797ae57928689161

  • SHA256

    6581bbef0a6cf8eb66596fb79a4b35dece2e102812e42da6b6de2b9d0622aad5

  • SHA512

    862b51b2a222c90134f83035c6fbd0b7d4bbc666607faf285eb68bb94512a4dc404202135ac01f96f359f4626621ec5b123f7b4fba0b07e2cf5deccd0e7cc9f2

  • SSDEEP

    6144:LEO9keKeQrw6P+cdqWoAfA/OyGrUH9i+TE45kmf:L2ed+we+cNS/999l5

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2