General

  • Target

    58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6

  • Size

    4.0MB

  • Sample

    220830-b8fqdsbah8

  • MD5

    fa2fabce38032e945e50f967548c9220

  • SHA1

    10ea8f54789c177b84d8d2ee8bb7b272d4330e97

  • SHA256

    58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6

  • SHA512

    0b439e1be504843021789e1b2f4bc9b6b1ced225753b117c0bb1ba246ce39801f0c215c6c1b0fb9fb20b44449c13d4fde68d050d9bb3dfe5556eec231e80fb2e

  • SSDEEP

    98304:zpkIhhI6DdmN9vzWv8blT6mKcwYl04bgSJyh2ttCF1pmLW:zKIhSAdwSkbISl7vim

Malware Config

Targets

    • Target

      58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6

    • Size

      4.0MB

    • MD5

      fa2fabce38032e945e50f967548c9220

    • SHA1

      10ea8f54789c177b84d8d2ee8bb7b272d4330e97

    • SHA256

      58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6

    • SHA512

      0b439e1be504843021789e1b2f4bc9b6b1ced225753b117c0bb1ba246ce39801f0c215c6c1b0fb9fb20b44449c13d4fde68d050d9bb3dfe5556eec231e80fb2e

    • SSDEEP

      98304:zpkIhhI6DdmN9vzWv8blT6mKcwYl04bgSJyh2ttCF1pmLW:zKIhSAdwSkbISl7vim

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks