General
- Target CC_Installer.exe
- Size 8.4MB
- Sample260930-p58hwsfg64
- SHA256 27a6b5904e791900fc3cf736a7ecd0fc9c17a6a2d61d8768a0e58b931fb5cba3
- MD5 6e58c2356eb03fc5a2d78dd031bb0671
- SHA1 a103245ed7510e5523c9c5db365573b1f60989f2
- SHA512 7231113fab7a13be9034e02cf99c9c3a3392d65520cfdea705b7545585602a60f8fa2ca5869ca7fb79e85075bf1c33e0358e49ce4dcfaadb6aa63276e661f01f
- SSDEEP 98304:ar0rd55Ab3ZPdVyl7ect83DqzCwWEfV/2ojhGhWVEZNA:ay5s3Ztn3afV/jUhWmZNA
- TLSH T159966B51FECB55F5EA03183101A7A2BF23301D068F28CB9BEB447B6AF9776914D36219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CC_Installer.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target CC_Installer.exe
- Size 8.4MB
- SHA256 27a6b5904e791900fc3cf736a7ecd0fc9c17a6a2d61d8768a0e58b931fb5cba3
- MD5 6e58c2356eb03fc5a2d78dd031bb0671
- SHA1 a103245ed7510e5523c9c5db365573b1f60989f2
- SHA512 7231113fab7a13be9034e02cf99c9c3a3392d65520cfdea705b7545585602a60f8fa2ca5869ca7fb79e85075bf1c33e0358e49ce4dcfaadb6aa63276e661f01f
- SSDEEP 98304:ar0rd55Ab3ZPdVyl7ect83DqzCwWEfV/2ojhGhWVEZNA:ay5s3Ztn3afV/jUhWmZNA
- TLSH T159966B51FECB55F5EA03183101A7A2BF23301D068F28CB9BEB447B6AF9776914D36219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Discovery
Peripheral Device Discovery
1Query Registry
2System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Network Connections Discovery
1