Extracted

• • Target

    818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73N

  • Size

    375KB

  • MD5

    18e6601dfa681939678501528d022eb0

  • SHA1

    afb53ae7cfe4010a2d19dc5c4a29979a7115d605

  • SHA256

    818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73

  • SHA512

    3677c879e05ee2f297d977b37e790859d12ce47136396fb590baff745bae66a0a5f0a6998b854ada2249e81f6b352803ce05506c2a7268db9db6fc61633688dd

  • SSDEEP

    6144:u2X9w3nkJpk9L9bhXLxFEay2RfJUL/FWlZV8A6nOCx6D4:u2N2ZbhXpyW0glX6nOb

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2