Extracted

• • Target

    8297a58305737187da69bf06da75b442_JaffaCakes118

  • Size

    339KB

  • MD5

    8297a58305737187da69bf06da75b442

  • SHA1

    7dde24eb80ed7976d841b05318ff7b288a0fed50

  • SHA256

    25accd71879827642c588e33892cc18629d504098174d3b44ff0b73e2e464e67

  • SHA512

    5610811141f3a9dd0507a712b1f3ee6d5e5b509ac0ac641bce2d9cc2a595d25b3e3a39837dcab8022d2a2e7c4334a4eca493c899e9f7907edc052c670a233bcc

  • SSDEEP

    6144:HxAiUW/TAzgxKRAbrGqE7G0Qxu9WuG5MDIKdqmdaVD2j:HxAiUW8zgfboIu0MsCt

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • Onlylogger family

    onlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2