General
- Target CCS-Free-V2.exe
- Size 41.2MB
- Sample260825-zb4mysyepe
- SHA256 0963eaf584168476e637057c7d25445b4277e77821b38895425cba06dc549599
- MD5 b4678baf3a3e445818daf91e66a4dc56
- SHA1 f2bd960f47db915100b9eeb2903053a251415b6e
- SHA512 0c517a60a7e14f7c579a0036ad268436219bff5a08138515db15017275b0939454bc4848fee0ea81990ce17a2a3b65e5770a6e043250b7f9e45207997bf75acb
- SSDEEP 786432:1m1g6hRFlYd2MiVySA3Lu0Ym5z8zFGpD/r:1ShhXl3VoSAzYm528Br
- TLSH T10A9733D765E262E8C4C34674A28D51DDA1C1A8BEC6EF892C19CB5C032931DDBCACD973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CCS-Free-V2.exe
Resource
win10v2004-20260513-de
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
CCS-Free-V2.exe
Resource
win10ltsc2021-20260513-de
10 signatures
900 seconds
Malware Config
Targets
-
- Target CCS-Free-V2.exe
- Size 41.2MB
- SHA256 0963eaf584168476e637057c7d25445b4277e77821b38895425cba06dc549599
- MD5 b4678baf3a3e445818daf91e66a4dc56
- SHA1 f2bd960f47db915100b9eeb2903053a251415b6e
- SHA512 0c517a60a7e14f7c579a0036ad268436219bff5a08138515db15017275b0939454bc4848fee0ea81990ce17a2a3b65e5770a6e043250b7f9e45207997bf75acb
- SSDEEP 786432:1m1g6hRFlYd2MiVySA3Lu0Ym5z8zFGpD/r:1ShhXl3VoSAzYm528Br
- TLSH T10A9733D765E262E8C4C34674A28D51DDA1C1A8BEC6EF892C19CB5C032931DDBCACD973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2