Analysis
-
max time kernel
92s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
27-03-2024 12:14
General
-
Target
$EXEDIR/CCleaner Business/CCleaner.exe
-
Size
3.5MB
-
MD5
e62ed5a7a2f21c5f377f924a33e12792
-
SHA1
6c3a1155aaee92c07a7f27dd64441c491ce733c2
-
SHA256
0199f5db10554a6138d7caf3d9d8a4b6ebfb49746b9523616406a4ed471ff39f
-
SHA512
38332209c797ecde26fa9cf9617b6a2daa2735f1ac08a1ae07384f487fb03c0bea4be1ef4159a7157456ec32e61ba386b23736cd4223e8840bbb555f70f190f0
-
SSDEEP
49152:HCvqo9q6j2zeKp4xJJVD68j+AfnL5d6z9CY7Jx34mo1xohq/n5tjS+7:HCFjW4jD68j++deskTJoToG7
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Business\CCleaner.exe"C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Business\CCleaner.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\pcaui.exe"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {22bfeed6-cb41-4fe3-9e7b-fab443ef9e19} -a "CCleaner" -v "Piriform Ltd" -s "This app can't run because it causes security or performance issues on Windows. A new version may be available. Check with your software provider for an updated version that runs on this version of Windows." -n 2 -f 2021048 -k 0 -e "C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Business\CCleaner.exe"2⤵
-