Extracted

• • Target

    35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7cN.exe

  • Size

    396KB

  • MD5

    8e7ee823e3bbc7d631fc56141f3371e0

  • SHA1

    672c08f83861ebb0d0face90edf7717ecdf7efff

  • SHA256

    35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7c

  • SHA512

    d974bb253c0b12d4b75b224face9d90386e7ffcad15510932b8154eede8b350a8ae3d311f40bdc91b021eb0d73627d402fc7f8ee42b34aa0b054191101d516aa

  • SSDEEP

    6144:RDNFoeWMNqhst3HziZ7Ia4py2BpcuEH8Zt5sSwwDiB:R7MMAyhHziZn4c2BORquwDG

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2