Overview
overview
7Static
static
3PCC2-Insta...16.exe
windows10-2004-x64
7PCC2-Insta...16.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$_CLICK/winplan.exe
windows10-2004-x64
3$_CLICK/winplan.exe
windows11-ltsc_2024-x64
3SDL.dll
windows10-2004-x64
3SDL.dll
windows11-ltsc_2024-x64
3SDL_image.dll
windows10-2004-x64
3SDL_image.dll
windows11-ltsc_2024-x64
3c2dump.exe
windows10-2004-x64
3c2dump.exe
windows11-ltsc_2024-x64
3c2export.exe
windows10-2004-x64
3c2export.exe
windows11-ltsc_2024-x64
3c2mgrep.exe
windows10-2004-x64
3c2mgrep.exe
windows11-ltsc_2024-x64
3c2mkturn.exe
windows10-2004-x64
3c2mkturn.exe
windows11-ltsc_2024-x64
3c2plugin.exe
windows10-2004-x64
3c2plugin.exe
windows11-ltsc_2024-x64
3c2pluginw.exe
windows10-2004-x64
3c2pluginw.exe
windows11-ltsc_2024-x64
3c2sweep.exe
windows10-2004-x64
3c2sweep.exe
windows11-ltsc_2024-x64
3c2unpack.exe
windows10-2004-x64
3c2unpack.exe
windows11-ltsc_2024-x64
3doc/AUTHORS.doc
windows10-2004-x64
1doc/AUTHORS.doc
windows11-ltsc_2024-x64
1doc/COPYING.doc
windows10-2004-x64
1doc/COPYING.doc
windows11-ltsc_2024-x64
1doc/NEWS.doc
windows10-2004-x64
1doc/NEWS.doc
windows11-ltsc_2024-x64
1General
- Target PCC2-Installer-2.0.16.exe
- Size 3.6MB
- Sample260801-ph5hqaae37
- SHA256 7848f6a7270cdf736177541fcad627136fb09f5713402f1d0e250e02e716c3be
- MD5 5fb4baf34ea4c78283fa482e42dd04d5
- SHA1 d2287e1bf0894126dfb41911ffb6d06ab5ac7f6a
- SHA512 f94da834ac735d7f4b9cdc1a57cea252ef14106350131340f6564cf29ab7e75f3a80352316ddc384656a0ba93cc3fd9101a81ad01ae5554b18cb354a2a393350
- SSDEEP 98304:zwo2AihSpoOisYWFb1GprLVbt/KhNPRbTka4YSJe7WLWt:z59USpoShluLVNKZ4zoKq
- TLSH T1760633C664FD6797C4E74A701B374083CA6EE8C20CA7188F7616D59CAF60EA3D51C1AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PCC2-Installer-2.0.16.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PCC2-Installer-2.0.16.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$_CLICK/winplan.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$_CLICK/winplan.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SDL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SDL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SDL_image.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SDL_image.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
c2dump.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
c2dump.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
c2export.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
c2export.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
c2mgrep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
c2mgrep.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
c2mkturn.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
c2mkturn.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
c2plugin.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
c2plugin.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
c2pluginw.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
c2pluginw.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
c2sweep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
c2sweep.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
c2unpack.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
c2unpack.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
doc/AUTHORS.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
doc/AUTHORS.doc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
doc/COPYING.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
doc/COPYING.doc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
doc/NEWS.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
doc/NEWS.doc
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PCC2-Installer-2.0.16.exe
- Size 3.6MB
- SHA256 7848f6a7270cdf736177541fcad627136fb09f5713402f1d0e250e02e716c3be
- MD5 5fb4baf34ea4c78283fa482e42dd04d5
- SHA1 d2287e1bf0894126dfb41911ffb6d06ab5ac7f6a
- SHA512 f94da834ac735d7f4b9cdc1a57cea252ef14106350131340f6564cf29ab7e75f3a80352316ddc384656a0ba93cc3fd9101a81ad01ae5554b18cb354a2a393350
- SSDEEP 98304:zwo2AihSpoOisYWFb1GprLVbt/KhNPRbTka4YSJe7WLWt:z59USpoShluLVNKZ4zoKq
- TLSH T1760633C664FD6797C4E74A701B374083CA6EE8C20CA7188F7616D59CAF60EA3D51C1AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 af15ef6479e5ac5752d139d1c477ec02def9077df897dadc8297005b3fc4999d
- MD5 61151aff8c92ca17b3fab51ce1ca7156
- SHA1 68a02015863c2877a20c27da45704028dbaa7eff
- SHA512 4f5c943b7058910dc635bdcfadfea1d369c3d645239d1a52b030c21f43aac8e76549e52fd28e38ba5341d32aefe3c090dd8377d9e105ad77f71ab8870d8e326e
- SSDEEP 192:2OShJI/rmOAIPkWpUybQ9WhP4t5Rwc89XbubZaX5:n6OAOkWWycGP4XRwc2qFaX5
- TLSH T10F225C5502A442F3DC54923C08973D676F787A249EB48FC3CF931445AF299AABC7D326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_CLICK/winplan.exe
- Size 64KB
- SHA256 ae7e15c42ebb9bd5fdc5eafcbd63288b3781e0582a53289f9fd44fe58645b632
- MD5 8503ee5caf64dc4159bf3650e9bafd3a
- SHA1 46a6a11f7500991a3e5eb144f732065525d019df
- SHA512 64c55828186a40a360486a64a82065347685d2b235c12af319201807a8c58f871281b9c31374e6b3a5efc419a959386c8943392844975758e4f4ea234b1a7b8a
- SSDEEP 1536:2V+F1F+o2JD1/tIKnFAneDcLf4fN250j5Nu0JzvjPqU8xbboZa+RDVMfj8NxkcE9:W+Rk4KFL2f4fN250j5Nu0Jzv7qU8xbbN
- TLSH T11E53F912714148F2DCB205F19DCB7FFFCA21D61C94268B2AE350CD66EABB560766E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SDL.dll
- Size 316KB
- SHA256 0f0ec611e038be2dd9f08faa809051615911fd3ea734980359280362181608a6
- MD5 67acd10f873a6f1997b17e629e1dbdfe
- SHA1 dd95d21bc294072f6928ef9143cd2a71aa89b906
- SHA512 25740490d16cecf91980d861db0d3486a11ef818cbf824729dc48bd3ee0b3a5c8ea1ac779026185d99939df59e1efae94694394d61dc74222ef7ce1534e89594
- SSDEEP 6144:bZznUL/y6igDAqMCJDrAEsVuu0mhoP3Y14oWADKmzAB4wdi6:bZznUTy6igDAqMCJDrAEsVuu0mqPIs7
- TLSH T175645D41F60711F6F56706B4029ABFFF8A326339802194FDFA94DD6CAF226E1661D207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SDL_image.dll
- Size 42KB
- SHA256 4137bb92f8ab3b6a7488816203ae07cc5ecfd310bb5d14b492341869267d44c6
- MD5 d4946fc78634c9f7b53a4b14a9335ed5
- SHA1 5d0c0c6b5bb08efe8fee15ebdb8938148be03bcf
- SHA512 49a2af7781b3a0a5402ec2c11c57cfdd3aa9c169c60692364980eba9fb0f3ebdd901b2a11a2989df47da7315a4fbca9ccd8ad304b5feec118cfecdafbad43afa
- SSDEEP 768:k6/yoRNIv/mP9SBarqVc3GRL5YSYKeap4OgpSoWrq:k6/yHvxaOVc3kL1Heap4BpS/q
- TLSH T1D713F61BB60F84F6D16345701193F2BF9A309635E408816EDFC59D38EE379A1AB1E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2dump.exe
- Size 472KB
- SHA256 a787feeb384b9a409f6aad82833d5eab93e12ccf3133ec1f1c0953c378661637
- MD5 5f4e373000296fe3c82148b4a5fdda9d
- SHA1 ad8ec9dc7e988710fc8246a476a5d22665bf3067
- SHA512 eb72f263445a31331894413d4c952dffb38152183a089e5c9fbf68a19654552f917a90c897ba6cf4a418450fd6275b3daefb1fd4ebb97c568fdbed84c659b78e
- SSDEEP 12288:A8mePgvAPaItVaOLFEmu+EPfmyDiZITVkku0xiXxEYIisUJw0yLT:Jm7jOLFEmu+EPDqEu0xiXMrlT
- TLSH T108A40A25A60184F6CC7201B14E877BBE993499398022D51EB780CE5EFBB7CD17A6E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2export.exe
- Size 2.0MB
- SHA256 91b8385411fabb1983453fdcad0bace8baa6646e5f1a1237ddbc68149c728f58
- MD5 0c4f81427182139677f89f1f9129fcd6
- SHA1 c4ff602eccdc9be18f71027b836fef5630aeec89
- SHA512 d597359d2c672fc7be1cfa8f04f0814dfa04c76b935309d11bec66fc4dfa101568d7dce046e5f9f08e3cbdc042d31b33f320b6c87aeab0782c8386a60acb54aa
- SSDEEP 49152:bQwRk0izK6mVFy1eS/yaOD7geWcciOrfm3icXnF4R:cwRk0iO6mVFy1eSPOD7geyiMm3icXF4
- TLSH T12FA5F725D702C4F5CC7605B15943BAAE9A305E79D0219A0DE740DE1AFBF3DC2BA6A343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2mgrep.exe
- Size 541KB
- SHA256 9cac7e37ef9a8d368c2af18e9a0a154b88dd6577eb4fcc66ca91f52499eb63be
- MD5 bd2da82c591ef450bd09c1d744fa20f8
- SHA1 c4393e8c90f1630903b099d86e9ed9a8f3bdd469
- SHA512 4761ce15c8eb9caae25a5093302b479543925ea1a2f9b682dc90cfa39f261d1c1c072d9fd9640ab9ff5a4c77be6ba4aef89f4bf7a22924335940579088e963f3
- SSDEEP 12288:/5RfGtVhMPbmtq0TEXrPPgae66ohzAiCa2s8nN/tGGLc26n2JU6I:/5RfYq0TEXrPPJPR2s8nN/HFVXI
- TLSH T1CFC4D925A70284F5DD7205F14A877BBAA6348E398021DA0ED344CE1AFBB74D17E6E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2mkturn.exe
- Size 795KB
- SHA256 8fbc26c03611f166ba488fddba2619cf1c328ab5a35336e5679254a08d48c5b7
- MD5 6bb49a779b71c2ac07cd393dc8c84d98
- SHA1 3c43c8ca17982315b183be254fa372a1cc42fd63
- SHA512 ed1a15b633273c1f10b77bdc280065b76b549cc6a1b09aca862608311f499bb6c5890812286b7cdce3a0b76fe9415129493352e040f75bf9127b499bfa6ccfa9
- SSDEEP 24576:2Aawv8N2TjNaHxDAPF2ZnEs+HQEACv3rSHu89:2ALzTjNaH+PACv3rgu8
- TLSH T1BB05E7259A0284F5DC7205F15A57BAFE96345A399021CD0EE780CD1EFBB39C2BD6E213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2plugin.exe
- Size 505KB
- SHA256 b9f37f686900d65cb800238b8d27d911c7fe7f0662d8c347e039d7a2ee34cc8a
- MD5 9218698505ccc1dfb242574192d68bc3
- SHA1 2cb156fa2e60872fc85ca2f6b21d3b06bf2e3b3d
- SHA512 460f1d41cc21f5cf0df5affb24c73fcf8ff8239f66a81e74f3bc25b9d94775808f158c5c1303090a02ddef8fbdd6d16733adc4493cff1303524930b2ca39334c
- SSDEEP 12288:IL4OSsztxJ89M4axWyNwMi9fHqlnD8LtlOFF7P4lqnD6uyAguE:I0OdnxWyNwMi9f0AAF7P4l2Kt
- TLSH T189B4E925E70244F6CD7305F159477BBAAA209A398021D50EE340CE5EFBB78D1BA6E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2pluginw.exe
- Size 493KB
- SHA256 8cdd2cb6226d25ea2a8039913fde601813061c1cebaa1e6003511655591103a5
- MD5 7122cf02df0b9e22060ff4bcbf0c82b5
- SHA1 945b728798f3464e9829eff3d810a4658e58f29a
- SHA512 6ee880b82b35c0c5efb450e5816d5d37eb9825a4617365334fe5a36f0b6c5b4a11eb5dbff95daac6c6eab28db7681103819d4f5ac61a57f6607cfc99f654e636
- SSDEEP 12288:kNhQ/c3Dp1BOiY7WJ++3oOBZiRsY69SCifB7VfRbDrhsXQSLi+0YmSdwsI:k33DLboOBZiRsY696xnrhsXQItHI
- TLSH T1A1B4C925E70244F6DC7205F149877FBAA9248A398021D50FE340CE5AFBF78D5BA6E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2sweep.exe
- Size 449KB
- SHA256 71aa47a58e8b4c8f868d8837d0b1cc50fcfa99a4e56c18855f6bf51ace124fe8
- MD5 3a0175153ed71cd8e567dc9b4bfbda12
- SHA1 de0f1c70a606ef22ace3af9cb3b9203030f1e3f7
- SHA512 1957acca58c79feced8225408e8865fdc1ddb3bffae9879823296d252022183c00d8ea707a5ec156916bd005acb54e37bcb7662adeee2a06aced3d3a9131fe37
- SSDEEP 12288:H7CYpL4IGsf65BFJiG/B+YCC+llyCWPAN7aYLCdYBDC9tzCzx0fcF:H7CYpkliG/B+YCC+ll6AaYBDC9ItD
- TLSH T1B9A4D921E60244F6CD7305F149877BBE9A308E2D8021D61ED394CE59FBF7891BA6E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2unpack.exe
- Size 566KB
- SHA256 b66f851f725b46bfa76cfb0d028c28b0f96eee5e0b540e6f3152d294834991b4
- MD5 4a4828e7eca8daf0b373354278f57650
- SHA1 487c0112e8d8a588f3583c4cdccea00d320924ce
- SHA512 de56d217a43918c5eee90f7023b5392ce1805b5cc8d6d1e1b8940a52ce40124a921a4bf085ff4761d12d8ff413c9780c2e291793412b8946d6fa94acf70a192c
- SSDEEP 12288:KJHV1WzCbfsuyK5vwW59d1Cfz1nO4YHELkLO5wYDFLIRayweDZwTq/CP4fDR7:KJ11W+2Sd1Cfz1nO4TzywIRayweifuDZ
- TLSH T1D4C4D825A70284F5DD7205F15A477BBAAA348A398021DA0EE380CD19FFB78D17E6D353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target doc/AUTHORS.doc
- Size 535B
- SHA256 894123fc246466be71ea21ad23fb488596250da5522207a095f98dc8aca166b3
- MD5 09d4d10ec62a3daae92c9518fbca1bed
- SHA1 df248851760639297b9a3d10203cec6769f5570d
- SHA512 19f6994af63b0b55224c10875be334434f69b21642227e2f949a3e0909da28fcf6e0a85fe2344bb9312a80a4178d320c366b4a76529d27e76537311867b638c3
- TLSH T12DF00EA1F041E9DAA6232351029CC9053698BE67A3B540F6B9FD160B0FEA938439A85D
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target doc/COPYING.doc
- Size 3KB
- SHA256 6bdfeb08006b5e7b62bc2575b9dd1cd1dec091bbb3a60709da4a9016b87678d3
- MD5 b3fbbb99b2ab5841cd31bd1ac2eee821
- SHA1 f0bf6b456a220f4c9293dc24422bc8698f902d13
- SHA512 964c3f4bd00ef64f26cb5e1e74dd084ad7d9e85c0c3c1ea80ceb65d20ed6ad8cf46dd3be9c4ac807b0744d8a5dd0e81815009bad9641812f5adea06d6c5ad6a8
- TLSH T15C51855B2F4447B309D2C2793A9BD985E219C03D2726550428BDA25C273F72CD1FF850
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target doc/NEWS.doc
- Size 24KB
- SHA256 bf8bfc846b016575718bd9bff13c39b17fcd0e81aefc69d3c43c351712276627
- MD5 0c1ce26a9039d3cba60866cfe1337056
- SHA1 a2197c60b25d2f86a2f55c12224e28005eaa8aa5
- SHA512 2fe41317f5ca928910091d7666974cddcd3c373c25bcb00d2e7e9cbecb0cea94b30e826a2ac6c7385fd2a1481916023fe6d690d4462323397af207f55db59e6f
- SSDEEP 384:lwBxxuk2fw4xxx1Uh1f3sfMT/3HwZbcrLA5+hjJTs5:yBxxubw4xxxQNT/gELAchjJA5
- TLSH T197B2B32BB85712B917834667B97377326A7A812B37011181788CD0FCAF435F5D36B6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10