Extracted

• • Target

    08dc5b0fb0c2646f546f0af389c3c9934995f1cf6819a05c171db3eca242554d.exe

  • Size

    334KB

  • MD5

    bdf38f58675cd77401c679df69c4a3e8

  • SHA1

    298dac0330058235adec1bd5dd80c59f99c688af

  • SHA256

    08dc5b0fb0c2646f546f0af389c3c9934995f1cf6819a05c171db3eca242554d

  • SHA512

    fa056f5784c76252db3edff2f0ba060b2ac42fbb2c73fedaa076ba735b2f19c14b7feff69f6794f0108c98fe91764e4d45110459e87df68a072a78f212a363c1

  • SSDEEP

    6144:aLBLLLswh/uDmd4hjDjjeFUm7wsiRBQIFYc5gujYW:aLB/LUDI4DX9m7w/1YW

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2