Extracted

• • Target

    bf11b43e1f298bc90370b1dd83868443542a7c365a4afb204e8e2d6ffd89e44c.exe

  • Size

    2.0MB

  • MD5

    b612eb21d3e997f804a49c9a7dfb3558

  • SHA1

    5a1afbcafb6c233ce1afbb7dfcf674336352e83a

  • SHA256

    bf11b43e1f298bc90370b1dd83868443542a7c365a4afb204e8e2d6ffd89e44c

  • SHA512

    523e037ee05d40c993d1a5f4b351f14bb3787fa11832c5c68231eeca5ceb20760833ac132f8c5d17b0088c44382820d8458f5bb67b51b278236a44ef86bb450a

  • SSDEEP

    24576:m3K8VrXXaaDmW6MKYs9j0x5h3kW9I9ECxYKBG/P8FS7FSzwQS2xXkal/I+3N+xBW:mTaFWn/s9jeh0R1jBGMF8algEMBVnA

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2