General

  • Target

    7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060

  • Size

    4.0MB

  • Sample

    220830-cf8fdabcc4

  • MD5

    54759c68e5daf4d0195ccc4bd929b6ce

  • SHA1

    4dd9a7932308baec2b2d9d5e87aca88a488ac74e

  • SHA256

    7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060

  • SHA512

    1ca17ba07d44b26e25e7594a33510d772079e754fa8c06cde97cc5ede4d5a40e2e5ba0605ea1b075ac3e4e3c167075dacbd86094d5e5861195d1376352572d12

  • SSDEEP

    98304:cypn9dCRasCcYO/RT4V9KOJHXPXuKStQLHITrz45L534jnGsvapM:lpPO/Rs2OJHvfS278zcLB

Malware Config

Targets

    • Target

      7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060

    • Size

      4.0MB

    • MD5

      54759c68e5daf4d0195ccc4bd929b6ce

    • SHA1

      4dd9a7932308baec2b2d9d5e87aca88a488ac74e

    • SHA256

      7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060

    • SHA512

      1ca17ba07d44b26e25e7594a33510d772079e754fa8c06cde97cc5ede4d5a40e2e5ba0605ea1b075ac3e4e3c167075dacbd86094d5e5861195d1376352572d12

    • SSDEEP

      98304:cypn9dCRasCcYO/RT4V9KOJHXPXuKStQLHITrz45L534jnGsvapM:lpPO/Rs2OJHvfS278zcLB

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks