Extracted

• • Target

    file.exe

  • Size

    4KB

  • MD5

    ddc9229a87f36e9d555ddae1c8d4ac09

  • SHA1

    e902d5ab723fa81913dd73999da9778781647c28

  • SHA256

    efec912465df5c55b4764e0277aa4c4c549e612b4f3c5abf77aaec647729f78a

  • SHA512

    08b5ad94168bf90bae2f2917fde1b2a36650845fdcb23881d76ddddae73359fbd774c92083ba03a84083c48d4922afb339c637d49dfa67fbf9eb95b3bf86baa6

  • SSDEEP

    48:66sn7l2zMdoHSe0rHNMMb9Y7VxCioXsTfxZsFtow/ljhFvCFipfbNtm:PYqX9VxCJ8U/3F5zNt

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2