General
-
Target
ccsetup609pro.exe
-
Size
50.7MB
-
Sample
230324-3hhwlscb5w
-
MD5
d54e3f8343b8080c9dcaebcac1223c8d
-
SHA1
34c2a6e3b9e9e8af547e1b4690f9438c2136d927
-
SHA256
31c5c9de9fa8af8f0389c81073792c2d83593da92fa71ee23a119b2d3441f2ff
-
SHA512
10422d7805eb85d24656d247a248a33c30ec12824d5ec6e90c2433a7d62db7825ab8708ec352bbf96c300ed2299e374b689aab0dc217e39f34f559d125390434
-
SSDEEP
786432:/gdvr/D9oTblmYTv98cbxXUFvXIfo1XuQ5ogTsyB3jNYqvuOK1g2szehRXWg:/gdvv9slmYj98YUFv6kAKsk5DK0zeLP
Static task
static1
Behavioral task
behavioral1
Sample
ccsetup609pro.exe
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
ccsetup609pro.exe
Resource
win10v2004-20230220-es
Malware Config
Targets
-
-
Target
ccsetup609pro.exe
-
Size
50.7MB
-
MD5
d54e3f8343b8080c9dcaebcac1223c8d
-
SHA1
34c2a6e3b9e9e8af547e1b4690f9438c2136d927
-
SHA256
31c5c9de9fa8af8f0389c81073792c2d83593da92fa71ee23a119b2d3441f2ff
-
SHA512
10422d7805eb85d24656d247a248a33c30ec12824d5ec6e90c2433a7d62db7825ab8708ec352bbf96c300ed2299e374b689aab0dc217e39f34f559d125390434
-
SSDEEP
786432:/gdvr/D9oTblmYTv98cbxXUFvXIfo1XuQ5ogTsyB3jNYqvuOK1g2szehRXWg:/gdvv9slmYj98YUFv6kAKsk5DK0zeLP
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-