General

  • Target

    7de45b5b9c0dfa341a12269f1f700ed5a79ee9ba1a847386ece190c9a0984c77

  • Size

    4.0MB

  • Sample

    220830-cg2zzsbce6

  • MD5

    9a715d540082ccc793e90343355c3b66

  • SHA1

    21b92977e852cbf690385ca705ac48d5794168c0

  • SHA256

    7de45b5b9c0dfa341a12269f1f700ed5a79ee9ba1a847386ece190c9a0984c77

  • SHA512

    10521cccb9e57b7296e688d654b154cb44951912979981c2a2678549915415ae6e57ba66da323ae966438bbca470108c18a0bf54d8febd42b72aedbe9f7b02e4

  • SSDEEP

    98304:b/ppMa1kN/bwERc3/jfLUBAC45rh+GQnkMp6FQw+m9rq:bBmsm/bbc3rfLUBAC4NEHnAt79r

Malware Config

Targets

    • Target

      7de45b5b9c0dfa341a12269f1f700ed5a79ee9ba1a847386ece190c9a0984c77

    • Size

      4.0MB

    • MD5

      9a715d540082ccc793e90343355c3b66

    • SHA1

      21b92977e852cbf690385ca705ac48d5794168c0

    • SHA256

      7de45b5b9c0dfa341a12269f1f700ed5a79ee9ba1a847386ece190c9a0984c77

    • SHA512

      10521cccb9e57b7296e688d654b154cb44951912979981c2a2678549915415ae6e57ba66da323ae966438bbca470108c18a0bf54d8febd42b72aedbe9f7b02e4

    • SSDEEP

      98304:b/ppMa1kN/bwERc3/jfLUBAC45rh+GQnkMp6FQw+m9rq:bBmsm/bbc3rfLUBAC4NEHnAt79r

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks