General

  • Target

    1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249

  • Size

    4.0MB

  • Sample

    220830-bmeafahfbm

  • MD5

    297fd5aaaf704a6022d29c23e827a5d4

  • SHA1

    ba089c969c638c2343dfd43e741e2a9851e8f0b9

  • SHA256

    1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249

  • SHA512

    6a6ca4c889700405e5c6708f9691020abfe025c0b5ff0cede222812449982b78f105c8576dbeec494e54c1afc0b3c00e13f32bbc552fb9ed18784d8ae28d6fa3

  • SSDEEP

    98304:nz4et3RJKexAuPYZu2pBKaXmnXQ7sS3SkLD:8et6iRYZu2+GHCkLD

Malware Config

Targets

    • Target

      1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249

    • Size

      4.0MB

    • MD5

      297fd5aaaf704a6022d29c23e827a5d4

    • SHA1

      ba089c969c638c2343dfd43e741e2a9851e8f0b9

    • SHA256

      1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249

    • SHA512

      6a6ca4c889700405e5c6708f9691020abfe025c0b5ff0cede222812449982b78f105c8576dbeec494e54c1afc0b3c00e13f32bbc552fb9ed18784d8ae28d6fa3

    • SSDEEP

      98304:nz4et3RJKexAuPYZu2pBKaXmnXQ7sS3SkLD:8et6iRYZu2+GHCkLD

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks