Resubmissions

15/03/2024, 15:02

240315-seqryabd6w10

15/03/2024, 15:01

240315-seaqqade2510

15/03/2024, 14:58

240315-scbv1abc8v10

General

  • Target
    CCleaner64.exe
  • Size 43.2MB
  • Sample240315-seqryabd6w
  • SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family

File Explorer

  • CCleaner64.exe
    .exe 43.2MB

CCleaner64.exe

  • IMPHASH 3124947643beace819cbe9e99057ebe8
  • SHA256 f7e82f63ae0f6aac25332b763049bfbb5824239b4c61a02c3502a4fc6c6adb1b
  • MD5 SHA1 SHA512 SSDEEP
  • Meduza Stealer payload

Digest
8d:7c:62:aa:22:49:5c:ca:91:76:56:b7:ef:e8:71:94:2f:f5:91:99:b1:10:1f:2e:d5:53:79:59:a9:ad:a4:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB
Minor OS version
0
Major OS version
6
Entry point
3166848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\BUILD\work\1878ef5ed829e50b\bin\CCleaner\Release Static\x64\CCleaner64.pdb