General

  • Target

    808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f

  • Size

    4.0MB

  • Sample

    220830-chcfqabce9

  • MD5

    41445d964ef31131dee871cf995e66b7

  • SHA1

    76998a4554e14eba58835679d595a9573e407062

  • SHA256

    808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f

  • SHA512

    b010542e1e70cdd6f7af26e70aed19de5d9f9f04542fec4fda7b0c804c1bc5b8719bbbd782557da14bff80f49cbeeebf0c68ae644eaaec86e4db30a3a8421843

  • SSDEEP

    98304:0KrroLuJQvtzFKXwn5anMXc8K29mMPtlb+f7P1uhq9ixhv5:1I0w5asK2AMFlKzPBMv5

Malware Config

Targets

    • Target

      808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f

    • Size

      4.0MB

    • MD5

      41445d964ef31131dee871cf995e66b7

    • SHA1

      76998a4554e14eba58835679d595a9573e407062

    • SHA256

      808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f

    • SHA512

      b010542e1e70cdd6f7af26e70aed19de5d9f9f04542fec4fda7b0c804c1bc5b8719bbbd782557da14bff80f49cbeeebf0c68ae644eaaec86e4db30a3a8421843

    • SSDEEP

      98304:0KrroLuJQvtzFKXwn5anMXc8K29mMPtlb+f7P1uhq9ixhv5:1I0w5asK2AMFlKzPBMv5

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks