Extracted

• • Target

    140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07N

  • Size

    454KB

  • MD5

    9e7b9e4a7ded28cd4c8a4003fe0b9b00

  • SHA1

    b19b8df33f77c739e03c0aac4fd6da410e336691

  • SHA256

    140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07

  • SHA512

    0247a017a3493c7df99b14a4e1f5cadba0703e0da9775996cdaa6200c0ac2a9125c60500779879c12bdcd1bac0475b740b2ba117c89e9452bc8217727f746c43

  • SSDEEP

    6144:1LdeTU+VIk/fYCxGnXOWwYA0g6EU6hv7jT41Pz+7gXH9Ay6BbOkT0:eTU+ik4CMXOHr0Pz+SdkNOM

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2