Overview

overview

6

Static

static

1

CCleaner64.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CCleaner64.exe

  • Size

    43.8MB

  • Sample

    250401-s74t9stpt3

  • MD5

    f116a86b8e6235cc551f30e1559d8d1d

  • SHA1

    0f5fd9e2d38068d58c222b6a78a7171a419e0575

  • SHA256

    c3897cae08e39f70508d372e8e60b99da4490ae09139da8199a5ba70ab254725

  • SHA512

    14293608ec71b50ab875421cd3cb37006957e03aae54c95131a6c212f95e11fb3120a9024e99ad9dce9d3e6feffe9e98fac6bc80cb3a6bd3cc971ccd4485c0a0

  • SSDEEP

    393216:qWtZTh5KxtGKB29mUXV+OJzZU59yx2i57CszyrQxZh6V4/rqNwp3JP+R4XjXhSpK:qWDh5K2n57rqQoiJP+R4zXs1K

Score
6/10
bootkitdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      CCleaner64.exe

    • Size

      43.8MB

    • MD5

      f116a86b8e6235cc551f30e1559d8d1d

    • SHA1

      0f5fd9e2d38068d58c222b6a78a7171a419e0575

    • SHA256

      c3897cae08e39f70508d372e8e60b99da4490ae09139da8199a5ba70ab254725

    • SHA512

      14293608ec71b50ab875421cd3cb37006957e03aae54c95131a6c212f95e11fb3120a9024e99ad9dce9d3e6feffe9e98fac6bc80cb3a6bd3cc971ccd4485c0a0

    • SSDEEP

      393216:qWtZTh5KxtGKB29mUXV+OJzZU59yx2i57CszyrQxZh6V4/rqNwp3JP+R4XjXhSpK:qWDh5K2n57rqQoiJP+R4zXs1K

    Score
    6/10
    bootkitdiscoverypersistencespywarestealer

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks