General

  • Target

    CFBAC2647EBE2341242D1C6375D766E4490C9D16FDBF100301E9E8102AEBA62C

  • Size

    4.0MB

  • Sample

    220720-j4aycaeabn

  • MD5

    7ef8f58583737a8c108918303391d106

  • SHA1

    2956ea1d8fa1b1bb837fdd1e6ebc129539f58fd0

  • SHA256

    cfbac2647ebe2341242d1c6375d766e4490c9d16fdbf100301e9e8102aeba62c

  • SHA512

    29fa570d15baa566ffa177da2c73baa8fae73a6886b5aacbc3b0ca67548db5781b0372f3277dce30cefe8ae24c6e4d8826919d9d3cd13f3e27c02174cfab23c5

Malware Config

Targets

    • Target

      CFBAC2647EBE2341242D1C6375D766E4490C9D16FDBF100301E9E8102AEBA62C

    • Size

      4.0MB

    • MD5

      7ef8f58583737a8c108918303391d106

    • SHA1

      2956ea1d8fa1b1bb837fdd1e6ebc129539f58fd0

    • SHA256

      cfbac2647ebe2341242d1c6375d766e4490c9d16fdbf100301e9e8102aeba62c

    • SHA512

      29fa570d15baa566ffa177da2c73baa8fae73a6886b5aacbc3b0ca67548db5781b0372f3277dce30cefe8ae24c6e4d8826919d9d3cd13f3e27c02174cfab23c5

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks