Extracted

• • Target

    66da2fce1b9eb472cf52d47a3ed5d5ccf8fb1bd15b9b6dc809ac6a913a6f4c36

  • Size

    2.5MB

  • MD5

    610c2597ef8c38dd051382291134cec5

  • SHA1

    30f8795164de19201eb3f9334ebf05261587a038

  • SHA256

    66da2fce1b9eb472cf52d47a3ed5d5ccf8fb1bd15b9b6dc809ac6a913a6f4c36

  • SHA512

    cfb1a782e2f17babbbd4f3205a31b9a74758abab7120f4015bbd4d3154a58b1c9ce67048d9c99ea6bf2db1a0c591ec4ed9a513868fed45370546f1014e0b6792

  • SSDEEP

    49152:Z2G9By3esCTp2WInd7SU1WM5x9L+AZ7KxTRn76K5e7mANjNRA5hq:MG943xCTp2WIndPHzL+AsNf5eaANgDq

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2