Overview

overview

7

Static

static

3

ccsetup626pro.exe

windows11-21h2-x64

7

$PLUGINSDIR/INetC.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ss.dll

windows11-21h2-x64

3

$_115_/lang-1025.dll

windows11-21h2-x64

1

$_115_/lang-1026.dll

windows11-21h2-x64

1

$_115_/lang-1027.dll

windows11-21h2-x64

1

$_115_/lang-1028.dll

windows11-21h2-x64

1

$_115_/lang-1029.dll

windows11-21h2-x64

1

$_115_/lang-1030.dll

windows11-21h2-x64

1

$_115_/lang-1031.dll

windows11-21h2-x64

1

$_115_/lang-1032.dll

windows11-21h2-x64

1

$_115_/lang-1034.dll

windows11-21h2-x64

1

CCUpdate.exe

windows11-21h2-x64

6

CCleaner.exe

windows11-21h2-x64

6

CCleaner64.exe

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    ccsetup626pro.exe
  • Size 72.2MB
  • Sample240814-eb3qfawdnd
  • SHA256 ebd3bc74866f6cd818141da0ff7ae51b4b1970dad1695f3f57845909f9c7b7a4
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 2 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ccsetup626pro.exe
    .exe 72.2MB
  • $PLUGINSDIR/INetC.dll
    .dll 23KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $_115_/lang-1025.dll
    .dll 247KB
  • $_115_/lang-1026.dll
    .dll 295KB
  • $_115_/lang-1027.dll
    .dll 297KB
  • $_115_/lang-1028.dll
    .dll 115KB
  • $_115_/lang-1029.dll
    .dll 261KB
  • $_115_/lang-1030.dll
    .dll 258KB
  • $_115_/lang-1031.dll
    .dll 292KB
  • $_115_/lang-1032.dll
    .dll 305KB
  • $_115_/lang-1034.dll
    .dll 290KB
  • $_115_/lang-1035.dll
    .dll 269KB
  • $_115_/lang-1036.dll
    .dll 302KB
  • $_115_/lang-1037.dll
    .dll 82KB
  • $_115_/lang-1038.dll
    .dll 288KB
  • $_115_/lang-1040.dll
    .dll 285KB
  • $_115_/lang-1041.dll
    .dll 155KB
  • $_115_/lang-1042.dll
    .dll 150KB
  • $_115_/lang-1043.dll
    .dll 287KB
  • $_115_/lang-1044.dll
    .dll 259KB
  • $_115_/lang-1045.dll
    .dll 292KB
  • $_115_/lang-1046.dll
    .dll 282KB
  • $_115_/lang-1048.dll
    .dll 303KB
  • $_115_/lang-1049.dll
    .dll 271KB
  • $_115_/lang-1050.dll
    .dll 282KB
  • $_115_/lang-1051.dll
    .dll 268KB
  • $_115_/lang-1052.dll
    .dll 96KB
  • $_115_/lang-1053.dll
    .dll 264KB
  • $_115_/lang-1054.dll
    .dll 252KB
  • $_115_/lang-1055.dll
    .dll 283KB
  • $_115_/lang-1056.dll
    .dll 270KB
  • $_115_/lang-1057.dll
    .dll 273KB
  • $_115_/lang-1058.dll
    .dll 275KB
  • $_115_/lang-1059.dll
    .dll 269KB
  • $_115_/lang-1060.dll
    .dll 286KB
  • $_115_/lang-1061.dll
    .dll 259KB
  • $_115_/lang-1062.dll
    .dll 268KB
  • $_115_/lang-1063.dll
    .dll 275KB
  • $_115_/lang-1065.dll
    .dll 269KB
  • $_115_/lang-1066.dll
    .dll 279KB
  • $_115_/lang-1067.dll
    .dll 95KB
  • $_115_/lang-1068.dll
    .dll 94KB
  • $_115_/lang-1071.dll
    .dll 103KB
  • $_115_/lang-1079.dll
    .dll 96KB
  • $_115_/lang-1081.dll
    .dll 272KB
  • $_115_/lang-1086.dll
    .dll 283KB
  • $_115_/lang-1087.dll
    .dll 93KB
  • $_115_/lang-1090.dll
    .dll 104KB
  • $_115_/lang-1092.dll
    .dll 92KB
  • $_115_/lang-1093.dll
    .dll 275KB
  • $_115_/lang-1102.dll
    .dll 97KB
  • $_115_/lang-1104.dll
    .dll 95KB
  • $_115_/lang-1109.dll
    .dll 99KB
  • $_115_/lang-1110.dll
    .dll 94KB
  • $_115_/lang-1155.dll
    .dll 111KB
  • $_115_/lang-2052.dll
    .dll 112KB
  • $_115_/lang-2070.dll
    .dll 285KB
  • $_115_/lang-2074.dll
    .dll 281KB
  • $_115_/lang-3098.dll
    .dll 97KB
  • $_115_/lang-5146.dll
    .dll 100KB
  • $_115_/lang-9999.dll
    .dll 98KB
  • $_83_/$_83_/ServiceUninstaller.dll
    .dll 497KB
  • CCUpdate.exe
    .exe 809KB
  • CCleaner.exe
    .exe 37.1MB
  • CCleaner64.exe
    .exe 42.9MB
  • CCleanerDU.dll
    .dll 13.1MB
  • Lang/lang-1025.dll
    .dll 247KB
  • Lang/lang-1026.dll
    .dll 295KB
  • Lang/lang-1027.dll
    .dll 297KB
  • Lang/lang-1028.dll
    .dll 115KB
  • Lang/lang-1029.dll
    .dll 261KB
  • Lang/lang-1030.dll
    .dll 258KB
  • Lang/lang-1031.dll
    .dll 292KB
  • Lang/lang-1032.dll
    .dll 305KB
  • Lang/lang-1034.dll
    .dll 290KB
  • Lang/lang-1035.dll
    .dll 269KB
  • Lang/lang-1036.dll
    .dll 302KB
  • Lang/lang-1037.dll
    .dll 82KB
  • Lang/lang-1038.dll
    .dll 288KB
  • Lang/lang-1040.dll
    .dll 285KB
  • Lang/lang-1041.dll
    .dll 155KB
  • Lang/lang-1042.dll
    .dll 150KB
  • Lang/lang-1043.dll
    .dll 287KB
  • Lang/lang-1044.dll
    .dll 259KB
  • Lang/lang-1045.dll
    .dll 292KB
  • Lang/lang-1046.dll
    .dll 282KB
  • Lang/lang-1048.dll
    .dll 303KB
  • Lang/lang-1049.dll
    .dll 271KB
  • Lang/lang-1050.dll
    .dll 282KB
  • Lang/lang-1051.dll
    .dll 268KB
  • Lang/lang-1052.dll
    .dll 96KB
  • Lang/lang-1053.dll
    .dll 264KB
  • Lang/lang-1054.dll
    .dll 252KB
  • Lang/lang-1055.dll
    .dll 283KB
  • Lang/lang-1056.dll
    .dll 270KB
  • Lang/lang-1057.dll
    .dll 273KB
  • Lang/lang-1058.dll
    .dll 275KB
  • Lang/lang-1059.dll
    .dll 269KB
  • Lang/lang-1060.dll
    .dll 286KB
  • Lang/lang-1061.dll
    .dll 259KB
  • Lang/lang-1062.dll
    .dll 268KB
  • Lang/lang-1063.dll
    .dll 275KB
  • Lang/lang-1065.dll
    .dll 269KB
  • Lang/lang-1066.dll
    .dll 279KB
  • Lang/lang-1067.dll
    .dll 95KB
  • Lang/lang-1068.dll
    .dll 94KB
  • Lang/lang-1071.dll
    .dll 103KB
  • Lang/lang-1079.dll
    .dll 96KB
  • Lang/lang-1081.dll
    .dll 272KB
  • Lang/lang-1086.dll
    .dll 283KB
  • Lang/lang-1087.dll
    .dll 93KB
  • Lang/lang-1090.dll
    .dll 104KB
  • Lang/lang-1092.dll
    .dll 92KB
  • Lang/lang-1093.dll
    .dll 275KB
  • Lang/lang-1102.dll
    .dll 97KB
  • Lang/lang-1104.dll
    .dll 95KB
  • Lang/lang-1109.dll
    .dll 99KB
  • Lang/lang-1110.dll
    .dll 94KB
  • Lang/lang-1155.dll
    .dll 111KB
  • Lang/lang-2052.dll
    .dll 112KB
  • Lang/lang-2070.dll
    .dll 285KB
  • Lang/lang-2074.dll
    .dll 281KB
  • Lang/lang-3098.dll
    .dll 97KB
  • Lang/lang-5146.dll
    .dll 100KB
  • Lang/lang-9999.dll
    .dll 98KB
  • branding.dll
    .dll 50KB

ccsetup626pro.exe

  • IMPHASH 61259b55b8912888e90f516ca08dc514
  • SHA256 ebd3bc74866f6cd818141da0ff7ae51b4b1970dad1695f3f57845909f9c7b7a4
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86
Digest
77:da:52:a6:9a:fa:bf:73:e5:47:64:a1:19:6a:d6:ec:89:3d:ff:1d:ad:ae:e3:cf:fc:e8:0b:d7:73:10:44:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Gen Digital Inc.,O=Gen Digital Inc.,L=Tempe,ST=Arizona,C=US
Minor OS version
0
Major OS version
4
Entry point
13888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths