Overview
overview
10Static
static
cccheck.exe
windows7-x64
8cccheck.exe
windows10-2004-x64
8ccupdater.exe
windows7-x64
8ccupdater.exe
windows10-2004-x64
8ccuppin86.dll
windows7-x64
1ccuppin86.dll
windows10-2004-x64
1ccuppout86.dll
windows7-x64
1ccuppout86.dll
windows10-2004-x64
1install.exe
windows7-x64
10install.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
cccheck.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cccheck.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ccupdater.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
ccupdater.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ccuppin86.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ccuppin86.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
ccuppout86.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
ccuppout86.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
install.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
install.exe
Resource
win10v2004-20220901-en
Errors
General
-
Target
Adobe Premiere Pro [CRACK].zip
-
Size
23.8MB
-
MD5
641bd8601dbfe83d30303f645bc6cf2d
-
SHA1
3cd47398106137ebc986bc9f40762950ec79fad6
-
SHA256
af39b9c6a7952bfed795975040deaa8746a310ff1af006b95516ff2980e6dd9d
-
SHA512
b559d73fdf3eceda32e874780c487474d21c712ebb26b9ff3c0829b5641dd2eb91b6f8a059d566666bf106300702c9497da6ccd3a601dc204a3bf337a9abd105
-
SSDEEP
393216:BKDDDDDDDDDDDDDDDDDp+niwUD0pNnQEYSWI87xcWTI7p1jZeAQibk5j7V6e7udh:4DDDDDDDDDDDDDDDDD+UD0pN9fWraoG3
Malware Config
Signatures
Files
-
Adobe Premiere Pro [CRACK].zip.zip
-
Accessible.tlb
-
cccheck.exe.exe windows x64
8ad7d3f07924e8c2b7127391afd2da11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
_vsnwprintf
_callnewh
malloc
?terminate@@YAXXZ
_amsg_exit
_cexit
??3@YAXPEAX@Z
memcpy
memset
_itow
_errno
kernel32
SetLastError
GetModuleHandleA
GetProcAddress
GetVersion
GetLastError
VirtualQuery
TerminateProcess
GetCurrentProcess
Sleep
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
LoadLibraryW
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
SetUnhandledExceptionFilter
QueryPerformanceCounter
mscoree
CorBindToRuntimeEx
_CorExeMain
ole32
CoCreateInstance
comctl32
ord332
ord334
ord386
ord328
oleacc
ObjectFromLresult
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
user32
RegisterWindowMessageW
SendMessageTimeoutW
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nep Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ccupdater.exe.exe windows x64
8ad7d3f07924e8c2b7127391afd2da11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
_vsnwprintf
_callnewh
malloc
?terminate@@YAXXZ
_amsg_exit
_cexit
??3@YAXPEAX@Z
memcpy
memset
_itow
_errno
kernel32
SetLastError
GetModuleHandleA
GetProcAddress
GetVersion
GetLastError
VirtualQuery
TerminateProcess
GetCurrentProcess
Sleep
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
LoadLibraryW
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
SetUnhandledExceptionFilter
QueryPerformanceCounter
mscoree
CorBindToRuntimeEx
_CorExeMain
ole32
CoCreateInstance
comctl32
ord332
ord334
ord386
ord328
oleacc
ObjectFromLresult
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
user32
RegisterWindowMessageW
SendMessageTimeoutW
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nep Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ccuppin86.dll
-
ccuppout86.dll
-
data/111C9C24E2EDFEBCs
-
data/A7FDF864FBC10B77/1794A8A3CEFA1E3Es
-
data/A7FDF864FBC10B77/3640E0D55C7E54CFs
-
data/A7FDF864FBC10B77/5BB43CE6CCF2F4A0s
-
data/A7FDF864FBC10B77/6EF44C0008CDB599s
-
data/A7FDF864FBC10B77/A6189F8B76D323B8s
-
data/A7FDF864FBC10B77/B8DAFE92382C94D2s
-
data/A7FDF864FBC10B77/CB08383137C0FC0Fs
-
data/A7FDF864FBC10B77/DB75F91AA8351D99s
-
data/A7FDF864FBC10B77/configs
-
data/A7FDF864FBC10B77/maps
-
data/A7FDF864FBC10B77s
-
data/ADFD2DA9B699FEA9s
-
data/D877F783D5D3EF8C/configs
-
data/D877F783D5D3EF8C/maps
-
data/D877F783D5D3EF8Cs
-
install.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ