General
- Target PC_Cleaner_Pro_Full_Version HackingToolz.rar
- Size 5.0MB
- Sample260620-ygds2sg18p
- SHA256 5ce0fe595d86668c89d28c8f07843bb49948acc1468331a5f1269a6781eb318e
- MD5 66b4d4ad666381247e0d719895c97c19
- SHA1 3447b7daaf34fe09e7af66807d08fee9bdfd1874
- SHA512 130392fbc62cc8ddb51853bba4a74242051a82ebcdb1bfff5fb0803b0ce39199a6f7c00230faca09b3f6d5ecdffe757da0abc4c375dc6147d818ceb2bb763bfa
- SSDEEP 98304:PTJhuXzzxJjY69xj9R8lIXTl8ABtBUpkIPrjEzuxta7wnUSItw6o:Plh0BO69F38SapkI/UuxMkZ6o
- TLSH T1963633E6823A95BB57707713A1FC306BE4DD0265CB9BD5E1236C370AB6C9D902A80F4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PC_Cleaner_Pro_Full_Version.exe
Resource
win10ltsc2021-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target PC_Cleaner_Pro_Full_Version.exe
- Size 5.1MB
- SHA256 81214b4e051d1d01347a39bce9ec369aab7be99bb36cfad5709b95906072d91d
- MD5 b6558e2b79a19fc95c525acb02085c49
- SHA1 3acc0515987e33fd7857a9853e974cc8033e552c
- SHA512 2e976f824ac4635e648eca2f15ac0da17eff3d72b2eeccf491f8ddfcca9726044ed3807eea24d57a5d2699aea6b91f3fad095e671b9e4f1999c0fed9c2fa6e2b
- SSDEEP 98304:jy+posGEiyDy4x1Zo5T9rYUPfRrGUyzwnURzgb4aYhKz:MGD7xU5mkfR6xzDR0b4aiKz
- TLSH T1A23633F354C1D874F0407D70CA4BB8F09460AC2EF668B2571E5BFDAAF83BAC56969406
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1