General
- Target ccc.exe
- Size 6.7MB
- Sample260525-ev6lfaa12q
- SHA256 335ece5a7b777407207008ea7052a8e96fc56494d1d7422d5b5d5cdcf4cc3b5b
- MD5 4530223e41575768248cff405c7b11f0
- SHA1 4f8fb826fd24eee4c01633ddfd3530f2e9526cd0
- SHA512 faa30477ec9cc195f48fb3dfe1f8404739b47cceb91272701c10def8791d5e808e6f1e5ec1ec0db06d1b391ff95f75d347b2ec9d810f79f635d798205d5fbaa7
- SSDEEP 49152:ciTPMOfCI2CLXQzQpooN3UjvBUmuDbCQ+x52/wpfQIhgyzAhnsS9iO3TcfXzB20x:GO6IRguCPi1d62xYeOFzbZBxh
- TLSH T1C8667C19A3D50AE4D22BFA38CA668B33D772BC515637C30F0565E20A1F336919E6E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ccc.exe
Resource
win11-20260513-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target ccc.exe
- Size 6.7MB
- SHA256 335ece5a7b777407207008ea7052a8e96fc56494d1d7422d5b5d5cdcf4cc3b5b
- MD5 4530223e41575768248cff405c7b11f0
- SHA1 4f8fb826fd24eee4c01633ddfd3530f2e9526cd0
- SHA512 faa30477ec9cc195f48fb3dfe1f8404739b47cceb91272701c10def8791d5e808e6f1e5ec1ec0db06d1b391ff95f75d347b2ec9d810f79f635d798205d5fbaa7
- SSDEEP 49152:ciTPMOfCI2CLXQzQpooN3UjvBUmuDbCQ+x52/wpfQIhgyzAhnsS9iO3TcfXzB20x:GO6IRguCPi1d62xYeOFzbZBxh
- TLSH T1C8667C19A3D50AE4D22BFA38CA668B33D772BC515637C30F0565E20A1F336919E6E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1