Extracted

• • Target

    bd6c330fd96af047d02de131aa63fd81c068b58ff8f6ceb675b930b6a7ba9797

  • Size

    318KB

  • MD5

    cba3f9974037954c98332d3dda35ec57

  • SHA1

    35686b7040f2a2b9cc8a3f9f183eb05b0a2eb528

  • SHA256

    bd6c330fd96af047d02de131aa63fd81c068b58ff8f6ceb675b930b6a7ba9797

  • SHA512

    624d1d5d4412f7af1ec7bfdee2576d52adcb0b32e834e7b835ce147446b7576ab8cb5708664804712f521761f2192cfc7723950421785c7287dfb1ad1f854505

  • SSDEEP

    6144:dLLM7USXRBqZ/Wgg+ZckFumgThM/5y6F5:dLI7USXRM/WTAHkmgTCs

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2