Overview

overview

7

Static

static

3

ccsetup630.exe

windows7-x64

6

ccsetup630.exe

windows10-2004-x64

7

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$_135_/lang-1025.dll

windows7-x64

1

$_135_/lang-1025.dll

windows10-2004-x64

1

$_135_/lang-1026.dll

windows7-x64

1

$_135_/lang-1026.dll

windows10-2004-x64

1

$_135_/lang-1027.dll

windows7-x64

1

$_135_/lang-1027.dll

windows10-2004-x64

1

$_135_/lang-1028.dll

windows7-x64

1

$_135_/lang-1028.dll

windows10-2004-x64

1

$_135_/lang-1029.dll

windows7-x64

1

$_135_/lang-1029.dll

windows10-2004-x64

1

$_135_/lang-1030.dll

windows7-x64

1

$_135_/lang-1030.dll

windows10-2004-x64

1

$_135_/lang-1031.dll

windows7-x64

1

$_135_/lang-1031.dll

windows10-2004-x64

1

$_135_/lang-1032.dll

windows7-x64

1

$_135_/lang-1032.dll

windows10-2004-x64

1

$_135_/lang-1034.dll

windows7-x64

1

$_135_/lang-1034.dll

windows10-2004-x64

1

$_135_/lang-1035.dll

windows7-x64

1

$_135_/lang-1035.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccsetup630.exe

  • Size

    82.4MB

  • MD5

    dec9c125a4ee6c7c4b651fbd600f2ad9

  • SHA1

    bddda9734dbcdf0183035bd75376c9defb587592

  • SHA256

    8a2d5c5dd1807331a4ab4ddbcbab4746407fdb394806bba0d04f760233e61b0b

  • SHA512

    ea92edcdb6222eba859d50e8ce364c32420553b305e4474da3897049e70278d7f2dc667313274de1a11e2e4f1c6b0cf77c5de72b2486b90a3389e671fec2a9e8

  • SSDEEP

    1572864:DZnrq1x/6ILJGNzszAIytgiYdIootePh6+6GxMblmFHOZF4LZ:DZryxvoky85oQPb6EMblNZF4LZ

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 3 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • ccsetup630.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $_135_/lang-1025.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1027.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1028.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1029.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1030.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1032.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1042.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1044.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1054.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1056.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1057.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1061.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1063.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1065.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1068.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1081.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1086.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1087.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1090.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1092.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1093.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1102.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1104.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1109.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1110.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-1155.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-2074.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-3098.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_135_/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_84_/$_84_/ServiceUninstaller.dll
    .dll windows:6 windows x86 arch:x86

    59d5160c5aad05f8635ce95fff5827a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCUpdate.exe
    .exe windows:6 windows x86 arch:x86

    fd224f4478b50768f05a0af8cf728b9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleaner.exe
    .exe windows:6 windows x86 arch:x86

    b840b9f0b7c603c38cf963e4d0995739


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleaner64.exe
    .exe windows:6 windows x64 arch:x64

    2abf5be7582d61bf224ffe1aae079f00


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerBugReport.exe
    .exe windows:6 windows x64 arch:x64

    c7e9290bfe013013710b96093b7ac0c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerCrashDump.exe
    .exe windows:6 windows x64 arch:x64

    9e14d8faa8d04f9dd7de38177199efe2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerDU.dll
    .dll windows:6 windows x64 arch:x64

    5eff4e914f70594774d624b13ebc6d52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerPerformanceOptimizer.dll
    .dll windows:6 windows x64 arch:x64

    d884b2df217a94647ce6acb69fbfbade


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerPerformanceOptimizerService.exe
    .exe windows:6 windows x64 arch:x64

    583b24a0135b0d733de18d089de0d1e2


    Code Sign

    Headers

    Imports

    Sections

  • CCleanerReactivator.dll
    .dll windows:6 windows x64 arch:x64

    b8b05be14f2a5ac3fb6ee26eb9fc808e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerReactivator.exe
    .exe windows:6 windows x64 arch:x64

    591a347b6f419973b465a21f641b0923


    Code Sign

    Headers

    Imports

    Sections

  • Lang/lang-1025.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1027.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1028.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1029.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1030.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1032.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1042.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1044.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1054.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1056.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1057.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1061.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1063.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1065.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1068.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1081.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1086.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1087.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1090.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1092.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1093.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1102.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1104.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1109.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1110.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1155.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2074.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-3098.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • libwaapi.dll
    .dll windows:6 windows x64 arch:x64

    96aa59276e942a912f90b3a4fc613b68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libwaheap.dll
    .dll windows:6 windows x64 arch:x64

    4579528d9f107c4d5b73bc9c2cf81053


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libwalocal.dll
    .dll windows:6 windows x64 arch:x64

    2d2eced78742d3fad68aeb94e26d4fa0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libwaresource.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • libwautils.dll
    .dll windows:6 windows x64 arch:x64

    0c933b965f758047fc982ad1db628931


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libwavmodapi.dll
    .dll windows:6 windows x64 arch:x64

    e75482f7afa7e2f606aa2ff7d932a5ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wa_3rd_party_host_32.exe
    .exe windows:6 windows x86 arch:x86

    8228b51f94e32d919543d0118d0ddc46


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wa_3rd_party_host_64.exe
    .exe windows:6 windows x64 arch:x64

    eaa6039d7eb6e6c5df830272879946da


    Code Sign

    Headers

    Imports

    Exports

    Sections