Extracted

• • Target

    2025-02-18_63cbbb3cb5209a6882828bcc6f80ffd8_frostygoop_poet-rat_snatch

  • Size

    6.0MB

  • MD5

    63cbbb3cb5209a6882828bcc6f80ffd8

  • SHA1

    9a1d07de290fcb565c8aa43fac2281da07ead8bc

  • SHA256

    a6d44aba15ef1db05989b2dbb7d69273ddf151e2b1f7abdca1502b199daab12c

  • SHA512

    f59406168b133d0f4a554593b5e06b2354d7f9be3a979e3e8d58bd865fb2152d9ad9a19551b61fc8485394c73aaf4ba747479e133977613d9adc4f52c98b3c96

  • SSDEEP

    49152:7ZXZN6KdWxqIvKuCdM5/fhcbzd0tKBulyFqE4TabbEFooYcfV0T0FN/zO99Ix1Y2:7ZXzxtIeK5BAzlFqfoARaO

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Suspicious use of SetThreadContext

  behavioral1behavioral2