Overview
overview
7Static
static
3PCC2-Insta...15.exe
windows10-2004-x64
3PCC2-Insta...15.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$_CLICK/winplan.exe
windows10-2004-x64
3$_CLICK/winplan.exe
windows11-ltsc_2024-x64
3SDL.dll
windows10-2004-x64
3SDL.dll
windows11-ltsc_2024-x64
3SDL_image.dll
windows10-2004-x64
3SDL_image.dll
windows11-ltsc_2024-x64
3c2dump.exe
windows10-2004-x64
3c2dump.exe
windows11-ltsc_2024-x64
3c2export.exe
windows10-2004-x64
3c2export.exe
windows11-ltsc_2024-x64
3c2mgrep.exe
windows10-2004-x64
3c2mgrep.exe
windows11-ltsc_2024-x64
3c2mkturn.exe
windows10-2004-x64
3c2mkturn.exe
windows11-ltsc_2024-x64
3c2plugin.exe
windows10-2004-x64
3c2plugin.exe
windows11-ltsc_2024-x64
3c2pluginw.exe
windows10-2004-x64
3c2pluginw.exe
windows11-ltsc_2024-x64
3c2sweep.exe
windows10-2004-x64
3c2sweep.exe
windows11-ltsc_2024-x64
3c2unpack.exe
windows10-2004-x64
3c2unpack.exe
windows11-ltsc_2024-x64
3doc/AUTHORS.doc
windows10-2004-x64
1doc/AUTHORS.doc
windows11-ltsc_2024-x64
1doc/COPYING.doc
windows10-2004-x64
1doc/COPYING.doc
windows11-ltsc_2024-x64
1doc/NEWS.doc
windows10-2004-x64
1doc/NEWS.doc
windows11-ltsc_2024-x64
1General
- Target PCC2-Installer-2.0.15.exe
- Size 3.6MB
- Sample260801-pkk7vsvdpf
- SHA256 48f3adcc39dca99a303ad171563edec3302a9e7318d12d38c5ee9609d219c378
- MD5 2900ab2c08de2c072efb091cc77e7ce0
- SHA1 392449bb9c235735483f55c65992016b1dc9d0c9
- SHA512 72c039616351ee0ccab0804783e8bee0cf278df02d53d16fb30636fcf018865b47e36d70060fb9d81c31a18c316a5b27706069b18cb80bb8d612275e69f62f9a
- SSDEEP 98304:+Exm2tLrHmEoZXRIbyo0AfJA1g14hROIoGG6hrVcRb4:hlt9oZXRIeMxkgoRsIruRs
- TLSH T1A10633B852E2C0E7F6C5957F8CD4D76DB5219BCAD4245ECA1AD306D1F732AC0C8AB242
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PCC2-Installer-2.0.15.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PCC2-Installer-2.0.15.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$_CLICK/winplan.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$_CLICK/winplan.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SDL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SDL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SDL_image.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SDL_image.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
c2dump.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
c2dump.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
c2export.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
c2export.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
c2mgrep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
c2mgrep.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
c2mkturn.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
c2mkturn.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
c2plugin.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
c2plugin.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
c2pluginw.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
c2pluginw.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
c2sweep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
c2sweep.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
c2unpack.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
c2unpack.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
doc/AUTHORS.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
doc/AUTHORS.doc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
doc/COPYING.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
doc/COPYING.doc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
doc/NEWS.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
doc/NEWS.doc
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PCC2-Installer-2.0.15.exe
- Size 3.6MB
- SHA256 48f3adcc39dca99a303ad171563edec3302a9e7318d12d38c5ee9609d219c378
- MD5 2900ab2c08de2c072efb091cc77e7ce0
- SHA1 392449bb9c235735483f55c65992016b1dc9d0c9
- SHA512 72c039616351ee0ccab0804783e8bee0cf278df02d53d16fb30636fcf018865b47e36d70060fb9d81c31a18c316a5b27706069b18cb80bb8d612275e69f62f9a
- SSDEEP 98304:+Exm2tLrHmEoZXRIbyo0AfJA1g14hROIoGG6hrVcRb4:hlt9oZXRIeMxkgoRsIruRs
- TLSH T1A10633B852E2C0E7F6C5957F8CD4D76DB5219BCAD4245ECA1AD306D1F732AC0C8AB242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 af15ef6479e5ac5752d139d1c477ec02def9077df897dadc8297005b3fc4999d
- MD5 61151aff8c92ca17b3fab51ce1ca7156
- SHA1 68a02015863c2877a20c27da45704028dbaa7eff
- SHA512 4f5c943b7058910dc635bdcfadfea1d369c3d645239d1a52b030c21f43aac8e76549e52fd28e38ba5341d32aefe3c090dd8377d9e105ad77f71ab8870d8e326e
- SSDEEP 192:2OShJI/rmOAIPkWpUybQ9WhP4t5Rwc89XbubZaX5:n6OAOkWWycGP4XRwc2qFaX5
- TLSH T10F225C5502A442F3DC54923C08973D676F787A249EB48FC3CF931445AF299AABC7D326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_CLICK/winplan.exe
- Size 64KB
- SHA256 ad05c48385fe6745e35ea90eb3a3fab59493053c19b8d668ef3cc2ff12664c07
- MD5 717922ed9843a718c750438be2465f5a
- SHA1 6a899e5e817bfb79d1409995c15c0503a40d9580
- SHA512 b6f7d03c89ebaff9036f665b07fb948235edf2aefeec04dc7da067e51929116b020e044fd873493666bb994746eac32f95b95418c85fd855c0d4f085a8bae7bd
- SSDEEP 1536:wV+F1F+o2JD1/tIKnFAneDcLf4fN250j5Nu0JzvjPqU8xbboZa+RDVMfj8NxkcE9:o+Rk4KFL2f4fN250j5Nu0Jzv7qU8xbbN
- TLSH T15153F912714148F2DCB205F19DCB7FFFCA21D61C94268B2AE350CD66EABB560766E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SDL.dll
- Size 316KB
- SHA256 0f0ec611e038be2dd9f08faa809051615911fd3ea734980359280362181608a6
- MD5 67acd10f873a6f1997b17e629e1dbdfe
- SHA1 dd95d21bc294072f6928ef9143cd2a71aa89b906
- SHA512 25740490d16cecf91980d861db0d3486a11ef818cbf824729dc48bd3ee0b3a5c8ea1ac779026185d99939df59e1efae94694394d61dc74222ef7ce1534e89594
- SSDEEP 6144:bZznUL/y6igDAqMCJDrAEsVuu0mhoP3Y14oWADKmzAB4wdi6:bZznUTy6igDAqMCJDrAEsVuu0mqPIs7
- TLSH T175645D41F60711F6F56706B4029ABFFF8A326339802194FDFA94DD6CAF226E1661D207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SDL_image.dll
- Size 42KB
- SHA256 4137bb92f8ab3b6a7488816203ae07cc5ecfd310bb5d14b492341869267d44c6
- MD5 d4946fc78634c9f7b53a4b14a9335ed5
- SHA1 5d0c0c6b5bb08efe8fee15ebdb8938148be03bcf
- SHA512 49a2af7781b3a0a5402ec2c11c57cfdd3aa9c169c60692364980eba9fb0f3ebdd901b2a11a2989df47da7315a4fbca9ccd8ad304b5feec118cfecdafbad43afa
- SSDEEP 768:k6/yoRNIv/mP9SBarqVc3GRL5YSYKeap4OgpSoWrq:k6/yHvxaOVc3kL1Heap4BpS/q
- TLSH T1D713F61BB60F84F6D16345701193F2BF9A309635E408816EDFC59D38EE379A1AB1E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2dump.exe
- Size 472KB
- SHA256 ab37a482429f70a642de8ae61718cb250e92a658490e81d63deeaf295ecc5516
- MD5 04752e33a253d0ae9d7d99c3871a0104
- SHA1 45fd9ee25dc84689933e5350c2f418e137e0a811
- SHA512 af312123be0b88d1b88acb4a3b64f29ae8abc9345abbb588dca736355a606c8385645180ea3e1abc052f32b00b1d874ef3ef42fdf18f9f0545b8600cdca87c3d
- SSDEEP 12288:28mePgvAPaItVaOLFEmu+EPfmyDiZITVkku0xiXxEYIisUJ7LyLT:Pm7jOLFEmu+EPDqEu0xiXMgkT
- TLSH T1FBA40A25A60184F6CC7201B14E877BBE993499398022D51EB780CE5EFBB7CD17A6E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2export.exe
- Size 2.0MB
- SHA256 a580f77e7286920697f9e27a338834fe97ae805cbbd389c4010decc5d0614e83
- MD5 ec863b56acbf35ab1bc8d64fc5d318d6
- SHA1 42a63dabe41ba38399b026228d4dfd8b0d60f500
- SHA512 5aee24cf27acbf501fe7617718bee76529728421b8597e7a421255bdc47116e2e115ffecfc3d6f759973977f8fb01a2edd6d92bc87d6dc451d3e2338ec169593
- SSDEEP 49152:DgCI9WigwsYoR1ncDrUuCoNSPJqnxyClA/2l03PU2KFn:0CIcignYoR1ncDrU9ocPJqngCHl03PU1
- TLSH T19095E824D70294F5CCB205F15947BAAE9A305E74D0209A4EE740DE19FBF3DC2BA6A353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2mgrep.exe
- Size 541KB
- SHA256 e5e27c45ec5dc9e4e865d57dfa46a9026e4994e84f75aef2fc01ee5ea014f0f6
- MD5 40262224c36694363ef9b35916a8e1b8
- SHA1 edd2da52f38b9332bfdd76ebd507e52b5b378341
- SHA512 d91f90e17d0b3e89439746cbecb5cdaa51f6df0169af712f93c9524cc83d256812c12071cf9651229b65be48da3a4f18befb37787ff84df50899508476319e2a
- SSDEEP 12288:i5RfGtVhMPbmtq0TEXrPPgae66ohzAiCa2s8nN/tGGLc26njJo6I:i5RfYq0TEXrPPJPR2s8nN/HFsvI
- TLSH T12BC4D925A70284F5DD7205F14A877BBAA6348E398021DA0ED344CE1AFBB74D17E6E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2mkturn.exe
- Size 795KB
- SHA256 50f5f39981dec7ce4025e5e7046c9a59334d106b8ee04c254883fa52c24a7e4b
- MD5 0adabf6a848df29c5311b982e3506c96
- SHA1 b16dbb11207d9d239b663f3d4e76449603906d1c
- SHA512 6d639cafee0bca3e0f06b00e39bc676443ac1b05d0bd1c4670fdfb6c40f5b46d8f3b591537962fd3ac3c7b7076f4476a349bb59504b52102a8e215b323e78611
- SSDEEP 24576:2Aawv8N2TjNaHxDAPF2ZnEs+HQEACv3rSHuM9:2ALzTjNaH+PACv3rguM
- TLSH T13705E7259A0284F5DC7205F15A57BAFE96345A399021CD0EE780CD1AFBB39C2BD6E213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2plugin.exe
- Size 505KB
- SHA256 073c2581b8d74c1961d899bffe4e18f4a04865cf232ab5f598904875defeac1c
- MD5 f4dda35ffc7bc139dabbec12aa32cfea
- SHA1 164859c7772940085c87766b0e0ec6a6a6175d50
- SHA512 2480a09b4820825c273175c9c685a2e4fab10e17e2badbc1912f554dafa24fe86a40f676c63e2ffd1e342b86866ae57d9dc97ebe50df8a88573f02e1811fb6ec
- SSDEEP 12288:kL4OSsztxJ89M4axWyNwMi9fHqlnD8LtlOFF7P4lqnD6uyAUdE:k0OdnxWyNwMi9f0AAF7P4l2Ge
- TLSH T185B4E925E70244F6CD7305F159477BBAAA209A398021D50EE340CE5EFBB78D1BA6E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2pluginw.exe
- Size 493KB
- SHA256 05417060381a4fed310690e7ce0b649a2ae02cc7655fb2abbc7c6368a21070b4
- MD5 e7f492abcd82db12809c9ab52127ac90
- SHA1 11b28663713b01d77fec2d5278debbe9a66588ac
- SHA512 93c83f7d41aa0f2da9acd6496b24e1b752219f84d95eb9e0030e78a536e5de3b89987da1ee67d8f3e89b9af076f7dffe6ee11d7bb61d40c774e0b851c92cb35f
- SSDEEP 12288:YNhQ/c3Dp1BOiY7WJ++3oOBZiRsY69SCifB7VfRbDrhsXQSLi+0YmSE/sI:Y33DLboOBZiRsY696xnrhsXQIUEI
- TLSH T1D7B4C925E70244F6DC7205F149877FBAA9248A398021D50FE340CE5AFBF78D5BA6E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2sweep.exe
- Size 449KB
- SHA256 f0105d8504ca7e7736319a8ecb8a666de0c6e2b749c01be2efb2d28061a90db2
- MD5 de8cd822122eed6d466f06e771830d7e
- SHA1 e38a744b3429705639359d34976c9c9d3e1eab45
- SHA512 c2299a20a26dd23876326932404bc5ca295a788fad08412a76888c60355f0557f4fce73fa1090898b9801849f678eae963fd0acfacaac4c5f55354c7cb0fc415
- SSDEEP 12288:97CYpL4IGsf65BFJiG/B+YCC+llyCWPAN7aYLCdYBDC9tzCzx0fMF:97CYpkliG/B+YCC+ll6AaYBDC9Itz
- TLSH T151A4D921E60244F6CD7305F149877BBE9A308E2D8021D61ED394CE59FBF7891BA6E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target c2unpack.exe
- Size 566KB
- SHA256 64510ae30b414c869e237cb4a10e7ac7318a3e0096a15f2e199cc07a8ab1b1f4
- MD5 0c14f8734de44dac17e9a2e217429fcf
- SHA1 8be12f5038b9e8dc1ef7452c07e0145a81cfa82a
- SHA512 a10a5b38ce40f3a26e6c72c0e42e68759f1a61d8972b9d8916cbcea8a17daf5e19510fe790844ae582cbed684d910eb15aecf49001b9bb15913ef6127810f500
- SSDEEP 12288:jJHV1WzCbfsuyK5vwW59d1Cfz1nO4YHELkLO5wYDFLIRayweDZwTq/CP4XDy7:jJ11W+2Sd1Cfz1nO4TzywIRayweifGDO
- TLSH T1C6C4D825A70284F5DD7205F15A477BBAAA348A398021DA0EE380CD19FFB78D17E6D353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target doc/AUTHORS.doc
- Size 535B
- SHA256 894123fc246466be71ea21ad23fb488596250da5522207a095f98dc8aca166b3
- MD5 09d4d10ec62a3daae92c9518fbca1bed
- SHA1 df248851760639297b9a3d10203cec6769f5570d
- SHA512 19f6994af63b0b55224c10875be334434f69b21642227e2f949a3e0909da28fcf6e0a85fe2344bb9312a80a4178d320c366b4a76529d27e76537311867b638c3
- TLSH T12DF00EA1F041E9DAA6232351029CC9053698BE67A3B540F6B9FD160B0FEA938439A85D
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target doc/COPYING.doc
- Size 3KB
- SHA256 d02c686f4a3fbbf0b45381c147b8dc25cc288b0f16afe98e9d4b01014f93d2c0
- MD5 48747fccbab6851d48ddbe79aff8cfdd
- SHA1 89ef4a2e8e63413a510e7eb630a5f06f901e5eed
- SHA512 a3ad36fd3a9dd21b5b0898b6e89521562f066c170df5b47f52f069f4f6be527fca5f7e62d366fe2d9c331f83fdbe0d9f6a03b28e74180ed48f271104696db231
- TLSH T15351845B2F4447B30AD2C2793A9BD984E219C03D2726650428BDA25C273FB2CD2FF890
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target doc/NEWS.doc
- Size 24KB
- SHA256 33b544e6c2e131d1b0e5ee9f38f62a2483280636cef2ccc9ca09b17d06947660
- MD5 a94442c7a638c1ddab51b8116166117b
- SHA1 614a7e91fe2cc77fcdb7210d5157afed4ef790e3
- SHA512 163591a0d77bb014e722557005efb3ccc41f31a2e1f4ca5fe3250aca16ef09ff21e3d090b4248295d5aad58f3fc1b841d86488aeb664956c17ec8a8806b68529
- SSDEEP 384:awBxxuk2fw4xxx1Uh1f3sfMT/3HwZbcrLA5+hjJTs5:VBxxubw4xxxQNT/gELAchjJA5
- TLSH T11DB2B427F85712A917834663B97377326A7A812B37011181748CD0FCAF43AF5D36B6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10