ATT&CKReferencesTalos CCleanup 2017

Talos CCleanup 2017

Brumaghin, E. et al. (2017, September 18). CCleanup: A Vast Number of Machines at Risk. Retrieved March 9, 2018.

Open the source

Techniques2

Groups0

None recorded.

Software1

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1195.002
Compromise Software Supply Chain
MalwareCCBkdr

CCBkdr was added to a legitimate, signed version 5.33 of the CCleaner software and distributed on CCleaner's distribution site.

T1568.002
Domain Generation Algorithms
MalwareCCBkdr

CCBkdr can use a DGA for Fallback Channels if communications with the primary command and control server are lost.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.