General

  • Target

    CCV Checker c9.exe

  • Size

    11.2MB

  • Sample

    230403-wp1xfaab2y

  • MD5

    64a79ec8d1eb98a5e74ad5e7f2767a1b

  • SHA1

    739cdcb919493716ec4e235d07c61aad523ff1b3

  • SHA256

    348adf57fbbe1a8d51bbb49a5fbc4eb27982c71e5af5a9d94ffbe54068a7dec7

  • SHA512

    c860adff65a2c33ac4a9caf28126d6852415d17df6ab5344192ca49f7e33ea9a018929b9e288234c844fed7e92171bee507e2c2d3fdb6524530b1ab576849e43

  • SSDEEP

    196608:8wmW6PWkNmtYw5xHObgcxWqvc2CxXAR2q4kRLCMe+XrrlFgyp/3vBpiZ8eF//4R7:0nn+YwKb+qvcbBq4kRL7rvgypPvXuJFG

Score
7/10

Malware Config

Targets

    • Target

      CCV Checker c9.exe

    • Size

      11.2MB

    • MD5

      64a79ec8d1eb98a5e74ad5e7f2767a1b

    • SHA1

      739cdcb919493716ec4e235d07c61aad523ff1b3

    • SHA256

      348adf57fbbe1a8d51bbb49a5fbc4eb27982c71e5af5a9d94ffbe54068a7dec7

    • SHA512

      c860adff65a2c33ac4a9caf28126d6852415d17df6ab5344192ca49f7e33ea9a018929b9e288234c844fed7e92171bee507e2c2d3fdb6524530b1ab576849e43

    • SSDEEP

      196608:8wmW6PWkNmtYw5xHObgcxWqvc2CxXAR2q4kRLCMe+XrrlFgyp/3vBpiZ8eF//4R7:0nn+YwKb+qvcbBq4kRL7rvgypPvXuJFG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks