Extracted

• • Target

    b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c.exe

  • Size

    401KB

  • MD5

    1109b55da15dc95c8d6887c559cd8f7e

  • SHA1

    2053f81200e37b3c95933fd9e6b889b4fe83bd7e

  • SHA256

    b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c

  • SHA512

    4edc64eea5b454699f84df01645b75387bb825935d16ab11af8dfb1229edc9549b25eec00e5684d2b0a4aef5e372e0acc05871178f72ee400dddbe86bcde6c2e

  • SSDEEP

    6144:SIAvu3x1GEVMtDURIvEk3GaXBBQfAO0ITVY75z4XShqe+nPr1ljy:SIUu3XZVMtDBvXhkVRTVYlznqe+Pr1E

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • Onlylogger family

    onlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2