General

  • Target

    7b6662b7e68c82c21609f9c989adbbaeeb2b96fc546a3cdd54168f0d3b743583

  • Size

    4.0MB

  • Sample

    220825-xdmq4shha4

  • MD5

    ac13631b8c64bbefbe0c95baa07e4ead

  • SHA1

    359589babaf0891c770893a6dfff2bb676e5cbb0

  • SHA256

    7b6662b7e68c82c21609f9c989adbbaeeb2b96fc546a3cdd54168f0d3b743583

  • SHA512

    4deb6783ba6db11228b9b9d88f11d62b0439aec19f80a1c5356e4f5988810451f6dd9ee83107393154ce4a409137a6489fbdde0d53b6bf593d07100dde5befe3

  • SSDEEP

    98304:+CAOvB/KLINihANC1jlUplJ1VrrDHhpb8zQL7wX9Kc7Ku:PJ/KEkWNCplklJ7DTSQL74wE

Malware Config

Targets

    • Target

      7b6662b7e68c82c21609f9c989adbbaeeb2b96fc546a3cdd54168f0d3b743583

    • Size

      4.0MB

    • MD5

      ac13631b8c64bbefbe0c95baa07e4ead

    • SHA1

      359589babaf0891c770893a6dfff2bb676e5cbb0

    • SHA256

      7b6662b7e68c82c21609f9c989adbbaeeb2b96fc546a3cdd54168f0d3b743583

    • SHA512

      4deb6783ba6db11228b9b9d88f11d62b0439aec19f80a1c5356e4f5988810451f6dd9ee83107393154ce4a409137a6489fbdde0d53b6bf593d07100dde5befe3

    • SSDEEP

      98304:+CAOvB/KLINihANC1jlUplJ1VrrDHhpb8zQL7wX9Kc7Ku:PJ/KEkWNCplklJ7DTSQL74wE

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks