CCleanup: A Vast Number of Machines at Risk
Tags
attack-pattern: Data Direct Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Hardware - T1592.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 17a2c1a6-0fdc-4e62-8b94-1da8b1d7d32f
Fingerprint ad643ddda9bb8681
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 18, 2017, 3:51 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Oct. 31, 2024, 11:44 a.m.
Headline Vulnerability Information
Title CCleanup: A Vast Number of Machines at Risk
Detected Hints/Tags/Attributes 68/1/21
Source URLs
Redirection Url
Details Source http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html
Details Source https://blog.talosintelligence.com/2017/09/avast-distributes-malware.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 9 
speccy.piriform.com
Details Domain 1 
ab6d54340c1a.com
Details Domain 1 
aba9a949bc1d.com
Details Domain 1 
ab2da3d400c20.com
Details Domain 1 
ab3520430c23.com
Details Domain 1 
ab1c403220c27.com
Details Domain 1 
ab1abad1d0c2a.com
Details Domain 1 
ab8cee60c2d.com
Details Domain 1 
ab1145b758c30.com
Details Domain 1 
ab890e964c34.com
Details Domain 1 
ab3d685a0c37.com
Details Domain 1 
ab70a139cc3a.com
Details File 1 
cbkrdr.dll
Details File 1 
cbkdr.dll
Details sha256 4 
6f7840c77f99049d788155c1351e1560b62b8ad18ad0e9adda8218b9f432f0a9
Details sha256 4 
1a4a5123d7b2c534cb3e3168f7032cf9ebf38b9a2a97226d0fdb7933cf6030ff
Details sha256 3 
36b36ee9515e0a60629d2c722b006b33e543dce1c8c2611053e0651a0bfdb2e9
Details IPv4 27 
224.0.0.0
Details IPv4 3 
216.126.225.148
Details Pdb 2 
ccleaner.pdb
Details Windows Registry Key 2 
HKLM\SOFTWARE\Piriform\Agomo