Extracted

• • Target

    2025-02-23_917c1e363920ec785f5abfc96b130ca3_frostygoop_poet-rat_snatch

  • Size

    5.3MB

  • MD5

    917c1e363920ec785f5abfc96b130ca3

  • SHA1

    5ef136a3ddc4e10f7fd8704e308f1a02d622b2e7

  • SHA256

    9448b064561003061c9c80cafc9fd67be601cfde405626cd77224f1fd075ecb9

  • SHA512

    5d98b9b3c0834f83b2976e42b18d2e09c71e03e03586268df57b337d7207a6e06bcb9cc52c001b33baa58209f54c456fe8acd24f00450a4169b675a8b3eb2a1f

  • SSDEEP

    49152:CR3W92yqXHAkV5S4VzLcmwhGqMiOTsUCYCfpzd5RRPrSVvpxySvdxce1umA6k1zw:CFW4f3V5SmncqiOTsUoVdh65vdxgw

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Suspicious use of SetThreadContext

  behavioral1behavioral2