Extracted

• • Target

    852e2bb74ff593ea00e70f62ba7639533e104e2df02e53b13cf61133f942fc0b.exe

  • Size

    294KB

  • MD5

    13a595ded524800f38b3ca5bd464ba8d

  • SHA1

    2d61f91e83f9df37a715ce3109e42bd49185c917

  • SHA256

    852e2bb74ff593ea00e70f62ba7639533e104e2df02e53b13cf61133f942fc0b

  • SHA512

    0f592c82af3b419b4faf19474e2b5db7199c30b1b8a602a38f2a59a04aafcda817d619cb19da8aa2db4219e986d6a80d969ef6c0ec4d65b73eb36474f81277fa

  • SSDEEP

    6144:jbVyfXc9rZnPTFAgOOf7jjV7THzcdnKHfhRfFE/Q:jcXurZn+gfx7THIdK/hRfW/

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2