Extracted

• • Target

    3f73c454fbd23127c33404de97db689f443fd3a959a66ebd62138e8d2ebc5cecN

  • Size

    289KB

  • MD5

    3bfaa7ea61d78e24b664efca615806d0

  • SHA1

    a2a388d2123366c81bcf672d2954a970fbeb8661

  • SHA256

    3f73c454fbd23127c33404de97db689f443fd3a959a66ebd62138e8d2ebc5cec

  • SHA512

    7b5add3751ac8d8510cd4b7aca2bb97e6d37a5c79f75e3fc44e92d18fb0a8dcb98ae27124fafe001026bf4d853c6474744a04302b62e0d852ab10180e5ce7810

  • SSDEEP

    3072:4aXmGh/PLQfAwzlucGYXuA8bOmVjWE1wilOJdfqFkNyl5pXoblWkwrq+AZ/XR:bXdh/DnwhlNEbOmVjGQMFlWkwWH

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2