Extracted

• • Target
    setup_euone.bin.exe
  • Size 667KB
  • SHA256 055caa239318b8cd8497b8631dd1b1bef1e8ba5912791c48a2a3081a8d685b1b
  • MD5 6dc66880d7c1b2014999764b0d309d68
  • SHA1 83667598ab701a6e0902b2ac20a97083221bc264
  • SHA512 fdf423b09e8631a41f355a08e0692fd1bc601ce5d1a7ab09c6c59a097c50a8d479b27186e78fa99c01abe411a311cff0bb904c41cdd62212485b9ef3634cab46
  • SSDEEP 12288:mjZZtKGfanz1BulNam0SSiR1hsCTTHaAX2hol3n7PRGvqEY:85R0PuHhzaCXHaAX1lLPEqX
  • TLSH
    T1FCE4AF62A2A0C437D16337FB8D5B92B898F6FD103D2958892EE45D4C1F3B3817966393
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverygcleanerloaderprivilege_escalation

  • Family: GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Suspicious use of NtCreateUserProcessOtherParentProcess

    defense_evasionprivilege_escalation

  • Suspicious use of SetThreadContext

  behavioral1behavioral2