Extracted

• • Target

    b7b0dea77586bf700a6805164cebd665eefb9099e9d2181f2640a73b5190a563

  • Size

    2.5MB

  • MD5

    1bb4a3c2d8bd4afb972a0b107afd3ace

  • SHA1

    7a3a4deedbe7d2e564f2d83151c5518657126d30

  • SHA256

    b7b0dea77586bf700a6805164cebd665eefb9099e9d2181f2640a73b5190a563

  • SHA512

    5fd499cc0aff241f0b93bd6ee88d4207846d488f11450982f76f4559b3791a33c3149b099e2935032c769dcf5580aa51f5572a03172865f73638142adcfc66cf

  • SSDEEP

    49152:Z2sFfpB+r41Yd9JwIeyVPwxE3IJzojUYxlm0jXf0dvliA5hq:McB+rcYd3teyVPOE3I6t0d9ZDq

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2