Extracted

• • Target

    2025-02-25_e7635ac988cc3dd912f8c4eb8eeb6868_frostygoop_poet-rat_snatch

  • Size

    4.6MB

  • MD5

    e7635ac988cc3dd912f8c4eb8eeb6868

  • SHA1

    c3938b934ab8ca3aeaff4af4f9e9dd8f3252b741

  • SHA256

    c51c71a1ca6396d02dafbeee36c280c5c50fa671cc9cfe5a433efff3ce55d6c9

  • SHA512

    1131594c01d4430157ac156236facb71ea4a04b855b1b1f8c2e525659a803b2b6dca14c7b75eb66ea78e0a3f981a1293c234a8a9a239f93186a998a2ceac22ce

  • SSDEEP

    49152:pXwGLy2V2LACHDRsJwNbAC5RXWIE/ITsmSN8VBOiaXC6x16ZRMaU:pXwG+2chHDRtJAHIEN1EOiLZR

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Gcleaner family

    gcleaner

  • Suspicious use of SetThreadContext

  behavioral1behavioral2