General

  • Target

    30661f3565b06b2845f9a94c23d74086ab558b5dacd62395e6ea020dbbd3ed7f

  • Size

    4.0MB

  • Sample

    220830-by9wgsahe7

  • MD5

    790fa52a30832fba845d4d6fc7741583

  • SHA1

    80b2073db7aaac2d69f7c0dac1ed17eb663a4a23

  • SHA256

    30661f3565b06b2845f9a94c23d74086ab558b5dacd62395e6ea020dbbd3ed7f

  • SHA512

    192c2e7953e06d6d27fad2740c5cdc77ed24c1f7fc6ce88d196a26d26548ca43d8cabda85fe17041083054fd6b8d7f7046fa6ce86be0fed90ebe27fab6083577

  • SSDEEP

    98304:J3a1MWnXJ1OTSamNmdaX6V+xHT5wSiMy8rfXJA75:dapX4haKV+FNRB+N

Malware Config

Targets

    • Target

      30661f3565b06b2845f9a94c23d74086ab558b5dacd62395e6ea020dbbd3ed7f

    • Size

      4.0MB

    • MD5

      790fa52a30832fba845d4d6fc7741583

    • SHA1

      80b2073db7aaac2d69f7c0dac1ed17eb663a4a23

    • SHA256

      30661f3565b06b2845f9a94c23d74086ab558b5dacd62395e6ea020dbbd3ed7f

    • SHA512

      192c2e7953e06d6d27fad2740c5cdc77ed24c1f7fc6ce88d196a26d26548ca43d8cabda85fe17041083054fd6b8d7f7046fa6ce86be0fed90ebe27fab6083577

    • SSDEEP

      98304:J3a1MWnXJ1OTSamNmdaX6V+xHT5wSiMy8rfXJA75:dapX4haKV+FNRB+N

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks