Resubmissions

15/03/2024, 15:02

240315-seqryabd6w10

15/03/2024, 15:01

240315-seaqqade2510

15/03/2024, 14:58

240315-scbv1abc8v10

General

  • Target
    CCleaner64.exe
  • Size 43.2MB
  • Sample240315-seqryabd6w
  • SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      CCleaner64.exe
    • Size 43.2MB
    • SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
    • MD5 SHA1 SHA512 SSDEEP
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks for any installed AV software in registry

    • Downloads MZ/PE file

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks