YARA rules for CCleaner 5.33
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | b16bdb86-666e-4002-ac10-9eb52149953b |
| Fingerprint | bf1cc95eb37b86c9 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Sept. 21, 2017, 12:08 p.m. |
| Added to db | Jan. 18, 2023, 8:40 p.m. |
| Last updated | Nov. 17, 2024, 5:57 p.m. |
| Headline | YARA rules for CCleaner 5.33 |
| Title | YARA rules for CCleaner 5.33 |
| Detected Hints/Tags/Attributes | 20/1/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://blog.nviso.be/2017/09/21/yara-rules-for-ccleaner-5-33/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 261 | blog.talosintelligence.com |
|
| Details | File | 4 | avast-distributes-malware.html |
|
| Details | File | 7 | yara64.exe |
|
| Details | sha1 | 1 | f4bda9efa31ef4a8fa3b6bb0be13862d7b8ed9b0 |
|
| Details | sha256 | 4 | 1a4a5123d7b2c534cb3e3168f7032cf9ebf38b9a2a97226d0fdb7933cf6030ff |
|
| Details | sha256 | 3 | 36b36ee9515e0a60629d2c722b006b33e543dce1c8c2611053e0651a0bfdb2e9 |
|
| Details | sha256 | 4 | 6f7840c77f99049d788155c1351e1560b62b8ad18ad0e9adda8218b9f432f0a9 |
|
| Details | sha256 | 1 | c48b9db429e5f0284481b4611bb5b69fb6d5f9ce0d23dcc4e4bf63d97b883fb2 |
|
| Details | Pdb | 2 | ccleaner.pdb |
|
| Details | Url | 3 | http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html |
|
| Details | Windows Registry Key | 1 | HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\Agomo |