General

  • Target

    Seno_v0.7b_Fox_windows_64.exe

  • Size

    4.0MB

  • Sample

    220827-e2mrxaehf6

  • MD5

    204fd35204892d919fa8ef6b09297fc9

  • SHA1

    c41300c75c82739aef75815136ff9b2371f6abe2

  • SHA256

    c62e85295ad4f1d9932efb194763e370a41ad47af692a9d589ce63fc77a15aa9

  • SHA512

    8ebc360977ab3ceb6e64f9e59635c2c71bc06038c0ba02faa2b8c2b84fd4f2c4ff69526ef3cb70ab988381d27518ec71f2adde862e77b13ef80991a2c65e0520

  • SSDEEP

    98304:5MLnkA3ZisrPtFY1NavgRaziqXBEHFRPedweBIBjLXTEe:goGbUNaIciTHz2dXsDE

Malware Config

Targets

    • Target

      Seno_v0.7b_Fox_windows_64.exe

    • Size

      4.0MB

    • MD5

      204fd35204892d919fa8ef6b09297fc9

    • SHA1

      c41300c75c82739aef75815136ff9b2371f6abe2

    • SHA256

      c62e85295ad4f1d9932efb194763e370a41ad47af692a9d589ce63fc77a15aa9

    • SHA512

      8ebc360977ab3ceb6e64f9e59635c2c71bc06038c0ba02faa2b8c2b84fd4f2c4ff69526ef3cb70ab988381d27518ec71f2adde862e77b13ef80991a2c65e0520

    • SSDEEP

      98304:5MLnkA3ZisrPtFY1NavgRaziqXBEHFRPedweBIBjLXTEe:goGbUNaIciTHz2dXsDE

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks