Extracted

• • Target

    4722b8ae2d4b0cd9b5eae918fa346ef32cd56eb4fd23a74993c3c5337a786e62N.exe

  • Size

    332KB

  • MD5

    b43e6bb71d463a7eed07ee2f411eecb0

  • SHA1

    e8d487e0ae107877142a1dfa2219d1e2c59e976f

  • SHA256

    4722b8ae2d4b0cd9b5eae918fa346ef32cd56eb4fd23a74993c3c5337a786e62

  • SHA512

    34f5f3f32940cab47c731f783e5fafb367c6058ac720dd20b1e909178f3af9338c4cfe5efd5d28976be7b9d9e86081e2e7d297d5ea869088d477d45d6008f72f

  • SSDEEP

    6144:TBSTuWUckSbLG37/NG2ZO7nK/kgUaYJIpOok7+K:TBSTuWUye37/HUnK/kp+u+

  Score

  10^/10

  gcleaneronlyloggerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger

  • Onlylogger family

    onlylogger

  • OnlyLogger payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2