Extracted

• • Target

    026c006985cb0b6ad7a357a94e3927906ce0f624fd3e0ebe76010bef9b2930b2N.exe

  • Size

    410KB

  • MD5

    fa4dab7b8bd5893bd8a764b160973bf0

  • SHA1

    b15ab2e8186539e99795ea7316ca5edc0805ac08

  • SHA256

    026c006985cb0b6ad7a357a94e3927906ce0f624fd3e0ebe76010bef9b2930b2

  • SHA512

    54863ccd5b47f196a8ae4dff7231c4768e25d40f5359f5c817bdce5b6a57fed1468a4e38ae04f52590ae32baa995b4791d469a21b2a2d523da97a7f260ea3e3c

  • SSDEEP

    6144:oFluKwLzJ48gyfJTm9JxmCp20JBsXYmqyur9pk+AJZJMkuPF7:vKwB4kw9o0JBwBqyu/JAjJMV

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2