General

  • Target

    4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

  • Size

    4.0MB

  • Sample

    220830-b44awsbae5

  • MD5

    8fb7786eff6684cf88765737627d6a94

  • SHA1

    72df50be821f033c766d1772afca09a19cd4eefc

  • SHA256

    4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

  • SHA512

    c9c1673155d85251cf324eacd4f2709c41bdbce3ea1fff4de0b79b0af9733baacb78cb9eda7ddbe5165d740a89a951284fea7e03b2f0a8fcefdac5105c6958d8

  • SSDEEP

    98304:9UkxF4ytGpJEFKgeLzRdYI25aVpveWFMYN7lfuJIX1dOYkyPa:9Uk7ztGpn7d525aVdFMYNxGalsY

Malware Config

Targets

    • Target

      4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

    • Size

      4.0MB

    • MD5

      8fb7786eff6684cf88765737627d6a94

    • SHA1

      72df50be821f033c766d1772afca09a19cd4eefc

    • SHA256

      4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

    • SHA512

      c9c1673155d85251cf324eacd4f2709c41bdbce3ea1fff4de0b79b0af9733baacb78cb9eda7ddbe5165d740a89a951284fea7e03b2f0a8fcefdac5105c6958d8

    • SSDEEP

      98304:9UkxF4ytGpJEFKgeLzRdYI25aVpveWFMYN7lfuJIX1dOYkyPa:9Uk7ztGpn7d525aVdFMYNxGalsY

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks