MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9f5b9c8df8f4bb48ac57f808273436d6b7954e9685a2d65fd4dca4d2b6afa639. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GCleaner


Vendor detections: 14


Intelligence 14 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9f5b9c8df8f4bb48ac57f808273436d6b7954e9685a2d65fd4dca4d2b6afa639
SHA3-384 hash: bb593e15f20a612959aed6987781b866e87e0376b4151e0b388a64cb757199ded7d5142b8435e39fe3defb278c6a5eb1
SHA1 hash: 5d85e45f41584d4acd7ab27211e9bfb5d186d4df
MD5 hash: ea21c2b0a8c1ce6b50d5da6442d06eed
humanhash: colorado-wisconsin-glucose-wisconsin
File name:file
Download: download sample
Signature GCleaner
Create hunting rule
File size:2'061'709 bytes
First seen:2022-12-22 05:30:52 UTC
Last seen:2022-12-22 05:58:56 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash da86ff6d22d7419ae7f10724a403dffd (1'687 x GCleaner, 1 x Socks5Systemz)
ssdeep 49152:748v/QPOy9ON0HXxiiDVH+XZGOGMbXgORnbjWP7p3t:743ZXxHD8JUMUOxGdt
TLSH T11F95332766ADA231E18717770C60BCF3D7AD3E3128A92461B8CA771D5739C90B40F26B
TrID 81.0% (.EXE) Inno Setup installer (109740/4/30)
10.4% (.EXE) Win32 Executable Delphi generic (14182/79/4)
3.3% (.EXE) Win32 Executable (generic) (4505/5/1)
2.2% (.MZP) WinArchiver Mountable compressed Archive (3000/1)
1.4% (.EXE) Generic Win/DOS Executable (2002/3)