Extracted

• • Target

    80720127ec79062ef6f1921a999e537b5de8bcacbe95f441a171c10a78489052N

  • Size

    379KB

  • MD5

    74042996562dc0ae5689933fa7bcd340

  • SHA1

    50ccc368455a1e51f7387161df71bdc3663bac9a

  • SHA256

    80720127ec79062ef6f1921a999e537b5de8bcacbe95f441a171c10a78489052

  • SHA512

    7c3785d3704199a35ea91e47e139be45f3c9f4cdeefbc125695000387a7e1552cfd79b2c673bbf124009285f4736da4b7d1d79e63053c33f0ad78be84a12d64e

  • SSDEEP

    6144:O/uQMbZUMUy+u5ZEwa1ipqv1yCGKNSsKR9Rrj2WgepP/kjWbAcu:OWQMbmMUyr5Xq9nGNtE+pP8jW

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2