Extracted

• • Target

    4d5d9aa1237b3899214ecea06ca4db46c194cf526d71defb3d8b81cadb97697c.exe

  • Size

    299KB

  • MD5

    ab1e6093f0d842a726bcf5ebb044693d

  • SHA1

    7879bf7bba3bc9bcf86e90d9bfa09a45dc6a6789

  • SHA256

    4d5d9aa1237b3899214ecea06ca4db46c194cf526d71defb3d8b81cadb97697c

  • SHA512

    10a7527698533022a59ab1ebeaa008171b292364da727e80242dd786ded8ff09de6cf5f0c395f8c0a97073ab5bfbda5a8189c9baf45ed9d4e28ebdbb58de2441

  • SSDEEP

    6144:UlrLHGvicYHCATJfvoD9oD1F4mhko0eanbDiljjJIPTgsl2:UpCvirlTxoy4O903nbDCj8vl2

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2