General

  • Target

    bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e

  • Size

    4.0MB

  • Sample

    220825-g3j4hsgfeq

  • MD5

    6452e14763ae943f8e556f65c09473eb

  • SHA1

    290981d61d73c696b475c8fefed323b569418bde

  • SHA256

    bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e

  • SHA512

    44ac3be1c66b734a908a88c79df310788dd5edd1e8bbaa577682459163fa347282a937d4d4d48710e1a1f08e89ca8d4674cbdbc51e015539dce4509645727796

  • SSDEEP

    98304:wLkWvEFW/Aqom+wjGhcp2fN3Yvb30jPlhLmP/Y8o7124:wLjv+sLE5hcQNIvb30jfLmXY8Y0

Malware Config

Targets

    • Target

      bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e

    • Size

      4.0MB

    • MD5

      6452e14763ae943f8e556f65c09473eb

    • SHA1

      290981d61d73c696b475c8fefed323b569418bde

    • SHA256

      bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e

    • SHA512

      44ac3be1c66b734a908a88c79df310788dd5edd1e8bbaa577682459163fa347282a937d4d4d48710e1a1f08e89ca8d4674cbdbc51e015539dce4509645727796

    • SSDEEP

      98304:wLkWvEFW/Aqom+wjGhcp2fN3Yvb30jPlhLmP/Y8o7124:wLjv+sLE5hcQNIvb30jfLmXY8Y0

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks