Extracted

• • Target

    df440e30124aea35c94ecca6579ceed14e189854e052aec6dd63373136079e34

  • Size

    2.4MB

  • MD5

    40c7cccda874d15c1bc8097aca039975

  • SHA1

    a2055cbebd33af81f49e656ce229e77862f8d58c

  • SHA256

    df440e30124aea35c94ecca6579ceed14e189854e052aec6dd63373136079e34

  • SHA512

    f907c98f1b52dfb6579d822594edb6d4dd45f349eb5e3deea28264c6065dc8a590db16b0ee3005e63a21e78759008b97a821ff4172a7911050ebcf3cd848fc1c

  • SSDEEP

    49152:Z2sFppECA/lcgi9xyP89VE5rakel2XRv5Zkra1NfrA5hq:MesCA/lPP8Fkel2Bw1Dq

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2