General

  • Target

    F8D8AF9B56352051817A7EEC3D9D5796DD2415752C8761585F4E6C18E3588D57

  • Size

    4.0MB

  • Sample

    220720-j9rs2seahk

  • MD5

    f06fd38d0378b33350dc4f7219e5d620

  • SHA1

    6d7a2b0d832c154ecf8a21d7eaea39b478ed90f5

  • SHA256

    f8d8af9b56352051817a7eec3d9d5796dd2415752c8761585f4e6c18e3588d57

  • SHA512

    454042ee93dcc154fb530eab67d229372ee1d9b8e44de4c537917899c762f6132cf0aa357849d7e7df7d46680e8bc35eb3a111b8d55df91dff7c4faff392080e

Malware Config

Targets

    • Target

      F8D8AF9B56352051817A7EEC3D9D5796DD2415752C8761585F4E6C18E3588D57

    • Size

      4.0MB

    • MD5

      f06fd38d0378b33350dc4f7219e5d620

    • SHA1

      6d7a2b0d832c154ecf8a21d7eaea39b478ed90f5

    • SHA256

      f8d8af9b56352051817a7eec3d9d5796dd2415752c8761585f4e6c18e3588d57

    • SHA512

      454042ee93dcc154fb530eab67d229372ee1d9b8e44de4c537917899c762f6132cf0aa357849d7e7df7d46680e8bc35eb3a111b8d55df91dff7c4faff392080e

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks