General

  • Target

    5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504

  • Size

    4.0MB

  • Sample

    220830-b93ljsbbb6

  • MD5

    ddc1b0b756ffb0414681a694ab7112cd

  • SHA1

    17cdbd770ffb9201a7774590951f4bb963e48586

  • SHA256

    5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504

  • SHA512

    f4e6e3f0f4043db1554e50cfcbb283861f86105767294e7b38192eaa1678701f46789698ea3c56bf9fde963dd8770a5fa3ed492fa1e17f8d3e021e433c5bd7f9

  • SSDEEP

    98304:/U9hVt6s4kZFhhC0kkmk152yaKix5dg4Lu:sr4k71tmAFaKixD5

Malware Config

Targets

    • Target

      5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504

    • Size

      4.0MB

    • MD5

      ddc1b0b756ffb0414681a694ab7112cd

    • SHA1

      17cdbd770ffb9201a7774590951f4bb963e48586

    • SHA256

      5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504

    • SHA512

      f4e6e3f0f4043db1554e50cfcbb283861f86105767294e7b38192eaa1678701f46789698ea3c56bf9fde963dd8770a5fa3ed492fa1e17f8d3e021e433c5bd7f9

    • SSDEEP

      98304:/U9hVt6s4kZFhhC0kkmk152yaKix5dg4Lu:sr4k71tmAFaKixD5

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks