General

  • Target

    235bd4ff8f77c4185d277149e2b3dcb9fa5615f3e37fee4279c2cfb58d5118d5

  • Size

    4.0MB

  • Sample

    220830-bsz44ahgbq

  • MD5

    7342f743c5cb323e4a715f1c106750ee

  • SHA1

    fa89f7f5e849de17fd07137ffb7b3f9567d2c04d

  • SHA256

    235bd4ff8f77c4185d277149e2b3dcb9fa5615f3e37fee4279c2cfb58d5118d5

  • SHA512

    7589b506d0b7639992d4b5e6ebd7410c81b2eb1a047adec09f3e955cb1b4f35c27a08bcc954e258a07cfb1af2e9911e32d97279ff9677719acfc23a2858606ed

  • SSDEEP

    98304:lJeloz1B5/FWXW8iigyNM3i+fN39BWJB1Z6coSak4ukkiLcJL8:3eazVd+uyqi+f+XdoSak19iG

Malware Config

Targets

    • Target

      235bd4ff8f77c4185d277149e2b3dcb9fa5615f3e37fee4279c2cfb58d5118d5

    • Size

      4.0MB

    • MD5

      7342f743c5cb323e4a715f1c106750ee

    • SHA1

      fa89f7f5e849de17fd07137ffb7b3f9567d2c04d

    • SHA256

      235bd4ff8f77c4185d277149e2b3dcb9fa5615f3e37fee4279c2cfb58d5118d5

    • SHA512

      7589b506d0b7639992d4b5e6ebd7410c81b2eb1a047adec09f3e955cb1b4f35c27a08bcc954e258a07cfb1af2e9911e32d97279ff9677719acfc23a2858606ed

    • SSDEEP

      98304:lJeloz1B5/FWXW8iigyNM3i+fN39BWJB1Z6coSak4ukkiLcJL8:3eazVd+uyqi+f+XdoSak19iG

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks