Extracted

• • Target

    ae53ddff17c133e4d8b21519146627fd217ffcc0abae6e80b3b470f9c286d0d4

  • Size

    304KB

  • MD5

    457fe1c82df9f48e055f4ffd703e08ec

  • SHA1

    5290d7efd0a2f381dc34260126cac355c981a622

  • SHA256

    ae53ddff17c133e4d8b21519146627fd217ffcc0abae6e80b3b470f9c286d0d4

  • SHA512

    f80a44bf3dcbdfcc8ba148f5f12c4daaac8d2fa47c6b3f7a90fbfb461aa5584d656501afb0174044aa0f9d04f0b9f1091beb57a16049278c7c695b8a6c68451c

  • SSDEEP

    6144:ErL+HuubP9mGej+jyTGElJUqabqtepkHUl:YiO1fj+zqabqtee

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2