General

  • Target

    834cf29eea05769d2fe29fc732dba45379824a65e8534c64d6944d2701d8d283

  • Size

    4.0MB

  • Sample

    220830-cjf6asbcg7

  • MD5

    9242f83d4564324529df9e579e012199

  • SHA1

    361ce79e2f71c7b9e0ce7182c8aaf81f2f11a0f6

  • SHA256

    834cf29eea05769d2fe29fc732dba45379824a65e8534c64d6944d2701d8d283

  • SHA512

    f784dbc5f753594c83bbaf8666bdd82c3c89e574933d805349978d9511359e26e950a1f947e2296e6531c2145b0be15f61355ea6c89e0ce3b1f47d32707e6e24

  • SSDEEP

    98304:iqPaYZNllsDLop5FBOykhV+bmMBp6wA6ZXnUDgXSaO6183CM89HC:iQa2ZQ8p5Kyk63kDI8

Malware Config

Targets

    • Target

      834cf29eea05769d2fe29fc732dba45379824a65e8534c64d6944d2701d8d283

    • Size

      4.0MB

    • MD5

      9242f83d4564324529df9e579e012199

    • SHA1

      361ce79e2f71c7b9e0ce7182c8aaf81f2f11a0f6

    • SHA256

      834cf29eea05769d2fe29fc732dba45379824a65e8534c64d6944d2701d8d283

    • SHA512

      f784dbc5f753594c83bbaf8666bdd82c3c89e574933d805349978d9511359e26e950a1f947e2296e6531c2145b0be15f61355ea6c89e0ce3b1f47d32707e6e24

    • SSDEEP

      98304:iqPaYZNllsDLop5FBOykhV+bmMBp6wA6ZXnUDgXSaO6183CM89HC:iQa2ZQ8p5Kyk63kDI8

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks