Extracted

• • Target

    4a75d423320fd96f2702fc780f438337c7b3e1754b0ee590a021cf8b3094ef87

  • Size

    2.4MB

  • MD5

    b2c6b3363df999810d16e871f5124581

  • SHA1

    b2ac167eacdd584b712d5460f91365168addbd65

  • SHA256

    4a75d423320fd96f2702fc780f438337c7b3e1754b0ee590a021cf8b3094ef87

  • SHA512

    7da471485cc38cf91d246e8d46606c4ec619ae5b867cc234de0aba47f5caaec95f61242f20e92328618386c431584b30c85fa6ec0c864043389c6f9cf53028f5

  • SSDEEP

    49152:Z2P/vOk2Cz2bnnZ9wRmTb0YtY1UBX8gjjMh8+V/B5c8wmbNczX5z9Ap0cnWfA5hq:Mfd2w2zPww0YY1CX8OcV/TRwmW1zBqWt

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2