Extracted

• • Target

    edec4c408a06a5002559956a3845c1eef195901071abf8c210175e1ee5c1252b

  • Size

    2.4MB

  • MD5

    011728e42d13134d3fb4f258851362d2

  • SHA1

    3c31a474a7f586ff2864bfb9145f8eb1098966cb

  • SHA256

    edec4c408a06a5002559956a3845c1eef195901071abf8c210175e1ee5c1252b

  • SHA512

    86d77e299e2e6b0ed0e986d32ebe3cfecb794d33656b8a24549477129d137120c9ae95b8fd5bfb9db966eab45da8af1cf56c7ea429de54bae6317f9915dac5e4

  • SSDEEP

    49152:Z2Rv5Mj+a7NYr5o1OBKVYO2Q6xpnzHd6obVEXvB8/H154yv8zA5hq:MRv5Mj+aJYr5TEYO6xpz9fbVyB8Nr8UW

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2