General

  • Target

    357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

  • Size

    4.0MB

  • Sample

    220830-b11etshhdr

  • MD5

    e2000fde77951994b583b3fdadce18fd

  • SHA1

    8308cc2a7c8a9e038b8d7d4765c192d1986e2b5d

  • SHA256

    357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

  • SHA512

    b691edae0036a5cb4ba89da2600214a83293ad1adb57e55e124389acfe61d1cae1170eb24d54c4f9095c15e9418de323820eb4ac1af2096f62569e37906395f9

  • SSDEEP

    98304:BImcVtATWwlltFgcg2/2AfC0R0oxWnyW+uu8yjZ1fYfRTQETlzBI1X:WfATWMlVfC0R0Fp+uu8yjDfYfRTBCF

Malware Config

Targets

    • Target

      357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

    • Size

      4.0MB

    • MD5

      e2000fde77951994b583b3fdadce18fd

    • SHA1

      8308cc2a7c8a9e038b8d7d4765c192d1986e2b5d

    • SHA256

      357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

    • SHA512

      b691edae0036a5cb4ba89da2600214a83293ad1adb57e55e124389acfe61d1cae1170eb24d54c4f9095c15e9418de323820eb4ac1af2096f62569e37906395f9

    • SSDEEP

      98304:BImcVtATWwlltFgcg2/2AfC0R0oxWnyW+uu8yjZ1fYfRTQETlzBI1X:WfATWMlVfC0R0Fp+uu8yjDfYfRTBCF

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks