General

  • Target

    PC_Cleaner_setup.exe

  • Size

    7.5MB

  • Sample

    240906-yqdveavfmr

  • MD5

    5322033130c651d2b1123710a5451bed

  • SHA1

    227ac8148d980a4c2c6531623f962938a544f914

  • SHA256

    08fcc6659be419a070c15de4a58254919638994e4b76898bdff2d45184406862

  • SHA512

    83b2c926cfee9b4d4bfc94ee478e5d731b7eae915b7131cb489956bba40dcb3af9a67ffb2e423e7195989b25daa97ca451acab588e7cec8cefee49ac831d3264

  • SSDEEP

    196608:D/xIhkEAPhniiBiaEJky7UFsDGMa8rl8c:D/NPhtd/WDGmd

Malware Config

Targets

    • Target

      PC_Cleaner_setup.exe

    • Size

      7.5MB

    • MD5

      5322033130c651d2b1123710a5451bed

    • SHA1

      227ac8148d980a4c2c6531623f962938a544f914

    • SHA256

      08fcc6659be419a070c15de4a58254919638994e4b76898bdff2d45184406862

    • SHA512

      83b2c926cfee9b4d4bfc94ee478e5d731b7eae915b7131cb489956bba40dcb3af9a67ffb2e423e7195989b25daa97ca451acab588e7cec8cefee49ac831d3264

    • SSDEEP

      196608:D/xIhkEAPhniiBiaEJky7UFsDGMa8rl8c:D/NPhtd/WDGmd

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks