Extracted

• • Target

    2025-02-23_809388867d64e0c75312146cccf1fff6_frostygoop_poet-rat_snatch

  • Size

    6.3MB

  • MD5

    809388867d64e0c75312146cccf1fff6

  • SHA1

    3970fdfff10657eaf9dd4a737ce73ad1bea27d59

  • SHA256

    c06c01769858d4df717da014ed9ff1fa0d4a5a4adb47cc9c6aed44d2b2fbf5ff

  • SHA512

    f7ea1cdb64cd3e32a02cc16fa7867384e290d10e6d8b76dc5a20aadd9744f5a2aaa0f716567b0ac8f2c74110c630369a0eda1cb3d21b43fe970bf9c15edb0144

  • SSDEEP

    49152:sPJ8IaL73KtaDF+IUGacgR7UivwqO+EUTfQiNYzihzC3z5KR0obzT6YAFr6x1p8n:8J8IkD4GUIBaRGWwsQWGtzooFqJoXKhG

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2