Analysis
-
max time kernel
223s -
max time network
231s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
20-05-2023 16:53
General
-
Target
CCleaner.Technician.6.12.10490.Portable/Other/_Include/Installer.nsh
-
Size
5KB
-
MD5
45af5430552609fe766493dd02fbc3b8
-
SHA1
8e912d9bd4b72cf15fc4a1346f2cc677beb29161
-
SHA256
4d2de35891814dd77ec372f3d9204813a30c3e89512768d4db283a76d07e3194
-
SHA512
cc3228a6e531381d20da09d374a1b1d3d0583f82278f5c3578d0e98e1888bb3ce66bef5b44510cccf3b5db4abfe6bbab660fa7c703ddbaebbc7d9e4a25bab9e9
-
SSDEEP
96:8Yu0E183yDYr0NUNojOf7uKlSVdeY583RBJns3HeB8TgQ:8t0E18CDYr0NUNoCj5LY8Vs3HvTgQ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\CCleaner.Technician.6.12.10490.Portable\Other\_Include\Installer.nsh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx