Extracted

• • Target

    2025-02-16_728cffa0a14b4eee01867884a899dc2c_frostygoop_poet-rat_snatch

  • Size

    5.0MB

  • MD5

    728cffa0a14b4eee01867884a899dc2c

  • SHA1

    167eb9d72caecf5145185e5eec4b01ffe14c1e05

  • SHA256

    cf8b362bc545c356a2cd44e406442446d796a8ed8f245cb1eb4568c9f9516d0c

  • SHA512

    571b0501b2bb32fee7f7dbeccd218030f5529546141595607ac9b4c5864289f65f5367a884899cc3dcf043132c3ed5a027614a2cb26c05242a23fcd201d81ddc

  • SSDEEP

    49152:cWLatBqcE4ft02kePb1OJqNR5n781la5W6tI9aVtdRKHNrZDqtEVSZ2gw76x1Kja:FaqcE42Sb1OJq778p6tKvVSq9

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Downloads MZ/PE file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2