General

  • Target

    3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

  • Size

    4.0MB

  • Sample

    220830-bzw11sahf6

  • MD5

    4ea43c1228ceab5c14517d116cfbefe3

  • SHA1

    0dfdd70d4a217b0748fed1e7deabe89800cb292a

  • SHA256

    3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

  • SHA512

    2d5198c22188ff48e4ef80654dc33c21f356abebbfab56a7c1ced925ddbae975f6cbff24ca001f2d0321d713150732c5dabb2bdf081f742a742ef72a6bb2bbf5

  • SSDEEP

    98304:YEOjaq/BeRw29Datebul7c6g6KzEODdw4HD:YENqKw2ctzl7cD6Kw4

Malware Config

Targets

    • Target

      3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

    • Size

      4.0MB

    • MD5

      4ea43c1228ceab5c14517d116cfbefe3

    • SHA1

      0dfdd70d4a217b0748fed1e7deabe89800cb292a

    • SHA256

      3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

    • SHA512

      2d5198c22188ff48e4ef80654dc33c21f356abebbfab56a7c1ced925ddbae975f6cbff24ca001f2d0321d713150732c5dabb2bdf081f742a742ef72a6bb2bbf5

    • SSDEEP

      98304:YEOjaq/BeRw29Datebul7c6g6KzEODdw4HD:YENqKw2ctzl7cD6Kw4

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks