Extracted

• • Target

    c299ab6dba225dab89bb803033fe4a475a1c36a8cc0d26177342c5936dba4b1a

  • Size

    2.4MB

  • MD5

    f04d59eaa535e1d128959c1ebcefbec5

  • SHA1

    ac71ca1b1482764b23acd599076411decdfefac0

  • SHA256

    c299ab6dba225dab89bb803033fe4a475a1c36a8cc0d26177342c5936dba4b1a

  • SHA512

    289454b15098487ca0614c474244974297c2653d706b6885bae662389eaf9c83670d46be74d361589451d30e9f6a84b7e922946fa4d44656c0c1c2b1a188c2f8

  • SSDEEP

    49152:Z2EZ/wsqGuYVr5ofuaIo9YBlS+10KiHqwOsjRz/cqxjD6TcY+vLmvMMfA5hq:M6/w5GRVra39YvDcfOqRbcqxjU3U/MoW

  Score

  10^/10

  discoverygcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2