Extracted

• • Target

    a72788dbcd9ddd614e4987d4cb66edde23fac62abe3e16caff55740470ec72daN

  • Size

    411KB

  • MD5

    fa48c6a29d8b7e3c9bf78a4d1c9b1e00

  • SHA1

    bcb0cef9549b254703dce860fdcfcc5e1b608426

  • SHA256

    a72788dbcd9ddd614e4987d4cb66edde23fac62abe3e16caff55740470ec72da

  • SHA512

    f310fc07306741c99c50432556d8bc649826e0bfaa8d66d3033ac0118c2e81ac7afa77772d102d6466a74522348228a6c209d67c7b5ef8e061817e2ab9097afe

  • SSDEEP

    6144:bgsJ5cQj1EYGXWnmudtwohZc8Q8SAZkvoXrZKCckuesuizduJ8YYyifT1:8k5cQj1EYG9E3c8SmE2we5izd11L

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2