Analysis
-
max time kernel
67s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
20-05-2023 16:53
General
-
Target
CCleaner.Technician.6.12.10490.Portable/Other/_Include/Launcher.nsh
-
Size
14KB
-
MD5
526ef23976b8e0e0d9c23ce575cc91ca
-
SHA1
335bde5372f9c36a6d668d40915163cbf341fbb8
-
SHA256
b86841e8407d81da7bc51965e58a26a41a6760e2ef62489a5fca2f8830c2bb53
-
SHA512
d66772ba0999c3f75f2a6dfc7fb68d50621cbeff6bcc3213145018a8c9a48e591f2e4a76f087e0ab05155c67cfff746f7c74f45550c5dc463cd4c4df93627ccf
-
SSDEEP
384:gXzl1lm5uEVRLwEzVEaOQm0bSxkKp7ELpI6RhfaNUdK2HhqJ9mzU/YMI7p2wFozl:yzl1LXQm0e2KJypI63S2g2UICMph05/P
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\CCleaner.Technician.6.12.10490.Portable\Other\_Include\Launcher.nsh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx