General

  • Target

    2039dea342aa1e589203cbfbcda1bb56b8dc9caac73d512ad1be8e61b0bb8398

  • Size

    4.0MB

  • Sample

    220830-br59qaagd8

  • MD5

    471f775c761f5b6dd31fedc8e3a1350b

  • SHA1

    0f9e6515e9364279b63b86b5978c845240f51e9c

  • SHA256

    2039dea342aa1e589203cbfbcda1bb56b8dc9caac73d512ad1be8e61b0bb8398

  • SHA512

    a63e4219d20cc92197bace9849895ff96e78f85840a1f9c059de12d8797a641801d1b4ed362be83c719259c5dc65b998f77ee4632718454de5d095c74e2112f9

  • SSDEEP

    98304:FgPIo5vcyr1SMR2iQ7uxX4hLnApgyZIu7JI7g:Fbo5vt52iQK1qLAGXIJI7

Malware Config

Targets

    • Target

      2039dea342aa1e589203cbfbcda1bb56b8dc9caac73d512ad1be8e61b0bb8398

    • Size

      4.0MB

    • MD5

      471f775c761f5b6dd31fedc8e3a1350b

    • SHA1

      0f9e6515e9364279b63b86b5978c845240f51e9c

    • SHA256

      2039dea342aa1e589203cbfbcda1bb56b8dc9caac73d512ad1be8e61b0bb8398

    • SHA512

      a63e4219d20cc92197bace9849895ff96e78f85840a1f9c059de12d8797a641801d1b4ed362be83c719259c5dc65b998f77ee4632718454de5d095c74e2112f9

    • SSDEEP

      98304:FgPIo5vcyr1SMR2iQ7uxX4hLnApgyZIu7JI7g:Fbo5vt52iQK1qLAGXIJI7

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks