General

  • Target

    354a3d151a80f12cee757f65a3cf2fa2d2da3ed939120678bceaaaffde0a3be1

  • Size

    4.0MB

  • Sample

    220830-b1m5haahg8

  • MD5

    b4d21646a429f6263e99418253dd999f

  • SHA1

    76ed392cc7e3062b81ee4e83ec6f6aeefc53130d

  • SHA256

    354a3d151a80f12cee757f65a3cf2fa2d2da3ed939120678bceaaaffde0a3be1

  • SHA512

    46031d423020bfb6fcfd0639026f084828fde977a0cc8c8eb3a0ae257f5a42b76f245868ba03e88ea93bfcbacb406bcaef2d4172583e939302e8af34b0965d4e

  • SSDEEP

    98304:qYvqjbLI662PhKQze8YVsfosyZ63JvRpm2ehdSOidce/H:Hv0U6vPIQPYVsfgohRpmj5idcc

Malware Config

Targets

    • Target

      354a3d151a80f12cee757f65a3cf2fa2d2da3ed939120678bceaaaffde0a3be1

    • Size

      4.0MB

    • MD5

      b4d21646a429f6263e99418253dd999f

    • SHA1

      76ed392cc7e3062b81ee4e83ec6f6aeefc53130d

    • SHA256

      354a3d151a80f12cee757f65a3cf2fa2d2da3ed939120678bceaaaffde0a3be1

    • SHA512

      46031d423020bfb6fcfd0639026f084828fde977a0cc8c8eb3a0ae257f5a42b76f245868ba03e88ea93bfcbacb406bcaef2d4172583e939302e8af34b0965d4e

    • SSDEEP

      98304:qYvqjbLI662PhKQze8YVsfosyZ63JvRpm2ehdSOidce/H:Hv0U6vPIQPYVsfgohRpmj5idcc

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks