General
- Target CCleaner64.exe
- Size 43.2MB
- Sample240315-seqryabd6w
- SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
- MD5 1af32ba5eb1a80c555200f8923bec33c
- SHA1 497fe82f8192db81afb83e6c3b5309dba6c64a51
- SHA512 0dbb9274af44382e30cfe898156b1d8f79fa51cff23a2eeb582090f99648f4aa6c359013dacbd4c8bf221de0127b1565747293f9716b50641d16911f97998dac
- SSDEEP 393216:73/9Y5+7Smeh18mBTis2f17M1pv90E3tEFbhrqNw6+w+AJLlUhSp0huAelYnh:7PQ+wd9+7S0Earw+AJpUs7G
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
CCleaner64.exe
Resource
win7-20240221-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target CCleaner64.exe
- Size 43.2MB
- SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
- MD5 1af32ba5eb1a80c555200f8923bec33c
- SHA1 497fe82f8192db81afb83e6c3b5309dba6c64a51
- SHA512 0dbb9274af44382e30cfe898156b1d8f79fa51cff23a2eeb582090f99648f4aa6c359013dacbd4c8bf221de0127b1565747293f9716b50641d16911f97998dac
- SSDEEP 393216:73/9Y5+7Smeh18mBTis2f17M1pv90E3tEFbhrqNw6+w+AJLlUhSp0huAelYnh:7PQ+wd9+7S0Earw+AJpUs7G
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks for any installed AV software in registry
-
Downloads MZ/PE file
-
Drops desktop.ini file(s)
-
Legitimate hosting services abused for malware hosting/C2
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.