General

  • Target

    83f79bacb699d9e85a567910d089121faf527d25908d9c10da51fec32c7b741d

  • Size

    4.0MB

  • Sample

    220830-cjxhaabda3

  • MD5

    d8f0c4b0aedc9d615e6243c170020800

  • SHA1

    1bcda55c97879878ffc0dee52b471eb0d9fd736c

  • SHA256

    83f79bacb699d9e85a567910d089121faf527d25908d9c10da51fec32c7b741d

  • SHA512

    d2aa717a74abfadee68f81fd12d297b859f2dad69e726f893d7de7c15d4171715f53c35ad8944bdc0fcad864c9ca982c75669b7dc13621d446d9e7decaf53916

  • SSDEEP

    98304:A7tHbhI5SpFjFh5SRUvhlGACVI5XLkX0PCWiVlsjMT3Jx:UVIijF7/GYmUriQc

Malware Config

Targets

    • Target

      83f79bacb699d9e85a567910d089121faf527d25908d9c10da51fec32c7b741d

    • Size

      4.0MB

    • MD5

      d8f0c4b0aedc9d615e6243c170020800

    • SHA1

      1bcda55c97879878ffc0dee52b471eb0d9fd736c

    • SHA256

      83f79bacb699d9e85a567910d089121faf527d25908d9c10da51fec32c7b741d

    • SHA512

      d2aa717a74abfadee68f81fd12d297b859f2dad69e726f893d7de7c15d4171715f53c35ad8944bdc0fcad864c9ca982c75669b7dc13621d446d9e7decaf53916

    • SSDEEP

      98304:A7tHbhI5SpFjFh5SRUvhlGACVI5XLkX0PCWiVlsjMT3Jx:UVIijF7/GYmUriQc

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks