General

  • Target
    PC_Cleaner_Pro_Full_Version HackingToolz.rar
  • Size 5.0MB
  • Sample260620-ygds2sg18p
  • SHA256 5ce0fe595d86668c89d28c8f07843bb49948acc1468331a5f1269a6781eb318e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      PC_Cleaner_Pro_Full_Version.exe
    • Size 5.1MB
    • SHA256 81214b4e051d1d01347a39bce9ec369aab7be99bb36cfad5709b95906072d91d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks