Extracted

• • Target

    1bc494e04bb41e754b1b1b867e0d1af9ada161b11bc4bb0f1859ce7c431eed96N

  • Size

    271KB

  • MD5

    b0837166cff92b061636c23f5c0575f0

  • SHA1

    90de8a54b85cf32dc41e4aaa00c5cd5e39ce9ca0

  • SHA256

    1bc494e04bb41e754b1b1b867e0d1af9ada161b11bc4bb0f1859ce7c431eed96

  • SHA512

    e1faf43d7838dfbb32e44005f062ceefa91e37246acde424f409bcd8b5ddc8e63d9e1f484c4b316cc490a27311c306214fc799075b589dcb806951cec551ce02

  • SSDEEP

    6144:IKuLHDwL0WVe3Mid4UXy+LKgTZeyMNXT:IKuDDbWA3bpYgTrMp

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2