Extracted

• • Target
    setup_euone.bin.exe
  • Size 1.1MB
  • SHA256 b9ee64a87c0851dd8429292ce82bf450399658250105c99deb1296f2a622bcd5
  • MD5 260e44a9f340256b293b0746f08176e5
  • SHA1 39b008e86b4f844848b3a0449a0c68f7c7ce7a2b
  • SHA512 60af44fd125ee7a6f173e78b37be5350ab6f3a08a68ccd068f058308f78f4071c2895851833640ca7b2d2a040e562193f33a1e84a05f508d1c0dcd3856d5ea41
  • SSDEEP 24576:EhARXstc3Q9ZauCcIyrxBdKaytOt82u9IF66:aAj/wmamOLuKr
  • TLSH
    T177457C22A292C833C57337BD9D6B57B4996AFE003E38944A2FE55D4C1E3B641383539B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverygcleanerloaderprivilege_escalation

  • Family: GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Suspicious use of NtCreateUserProcessOtherParentProcess

    defense_evasionprivilege_escalation

  • Suspicious use of SetThreadContext

  behavioral1behavioral2