Extracted

• • Target

    3069eb99e0b3b07c22904f1f1861a90dd228641a854c403625082c92ff50f9d5.exe

  • Size

    1.2MB

  • MD5

    71e6b90f635c125e13fadf695b1e80e1

  • SHA1

    2f46bf2772d8570f072361b5eb1b03e30394c440

  • SHA256

    3069eb99e0b3b07c22904f1f1861a90dd228641a854c403625082c92ff50f9d5

  • SHA512

    f8968dabc9c75a0db60496659d82ca015da8ea761fd987b181e9f775a7c762a09c80e711b348a94ef80da569f1b4969c0c94186eb07f4735693025739a471f29

  • SSDEEP

    24576:a2exnN84v8TAGe4steUTnVjS/hg0Lw/LdQINtTWRUo6x/UEHM6a72t:a2WcT/eb/TnVm/h/wdtTWRU9st2t

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2