General

  • Target

    EBBE83F86C79DC8D81AD0208854F76F0014D31273BA3E8E1D6042AA5F673A18F

  • Size

    4.0MB

  • Sample

    220720-j8cmqseafn

  • MD5

    9995fdb06f7cd61410ea9142c4571d68

  • SHA1

    0d36a92c73326aab15ce11ec280611f7f36535ba

  • SHA256

    ebbe83f86c79dc8d81ad0208854f76f0014d31273ba3e8e1d6042aa5f673a18f

  • SHA512

    43d88da952bde4bcc07e9e0d1924774ebc316c6d564470b62b29d308f8ca6690305ab086ead5d97da6ac0274e78a6a892924406ce404273f366ce704dfe9ba0c

Malware Config

Targets

    • Target

      EBBE83F86C79DC8D81AD0208854F76F0014D31273BA3E8E1D6042AA5F673A18F

    • Size

      4.0MB

    • MD5

      9995fdb06f7cd61410ea9142c4571d68

    • SHA1

      0d36a92c73326aab15ce11ec280611f7f36535ba

    • SHA256

      ebbe83f86c79dc8d81ad0208854f76f0014d31273ba3e8e1d6042aa5f673a18f

    • SHA512

      43d88da952bde4bcc07e9e0d1924774ebc316c6d564470b62b29d308f8ca6690305ab086ead5d97da6ac0274e78a6a892924406ce404273f366ce704dfe9ba0c

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks