General

  • Target

    441bb32ddef212ac32975524bc93c9bb5e3b23143004e674dc0558ac70a5d54d

  • Size

    4.0MB

  • Sample

    220830-b4rxvsbad3

  • MD5

    1a1570a00378299097295c2ad925e8a4

  • SHA1

    ee849923d0d9bb5ba69e3874236eeb7139e93278

  • SHA256

    441bb32ddef212ac32975524bc93c9bb5e3b23143004e674dc0558ac70a5d54d

  • SHA512

    cd2ab0ea903a908ebf1c1e912e1fdf516eba930a5dce9e0ad5ee363d34503b63645d8a9316922315fd34aab0ac60eb896c641e19b1025512972dfe5f8df314f5

  • SSDEEP

    98304:p0A1PuLXjofu/vcq9iCgCf47u8/dOn0NhUKE1xGMBV2:p0AxwuuXDTfEu8/trw1xG

Malware Config

Targets

    • Target

      441bb32ddef212ac32975524bc93c9bb5e3b23143004e674dc0558ac70a5d54d

    • Size

      4.0MB

    • MD5

      1a1570a00378299097295c2ad925e8a4

    • SHA1

      ee849923d0d9bb5ba69e3874236eeb7139e93278

    • SHA256

      441bb32ddef212ac32975524bc93c9bb5e3b23143004e674dc0558ac70a5d54d

    • SHA512

      cd2ab0ea903a908ebf1c1e912e1fdf516eba930a5dce9e0ad5ee363d34503b63645d8a9316922315fd34aab0ac60eb896c641e19b1025512972dfe5f8df314f5

    • SSDEEP

      98304:p0A1PuLXjofu/vcq9iCgCf47u8/dOn0NhUKE1xGMBV2:p0AxwuuXDTfEu8/trw1xG

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks