Extracted

• • Target

    50e85ac3d9bdf258c9c511b687f2ec6e1a09604cd91947633d2ee6c1d56c0260

  • Size

    287KB

  • MD5

    fcf3ff415044e14199d68d62de873472

  • SHA1

    3bd17ad9fd41b3078de18e19e85df46c71eeb545

  • SHA256

    50e85ac3d9bdf258c9c511b687f2ec6e1a09604cd91947633d2ee6c1d56c0260

  • SHA512

    054a62c84682fc8eb5adec9f4290ee400a14e827ad091ed8f8d48cc62febf187f38eacc76d438bddb99a8e7c65480893ec89abc85e292cde23bc4b2690bd16a0

  • SSDEEP

    6144:fx7GSfhDn+jh+LcOB0Vl3k30t9WkCeVpY55rfMR2efAIA:tGShz2hUwU3auxPzzpIA

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2