General

  • Target

    88c36eae0908d1d67977d9b32f9da35b45122b97c05c6844110d34ec83388abd

  • Size

    4.0MB

  • Sample

    220830-cklr6sbda8

  • MD5

    c62982125ee1d246bbbcac25acd1b69b

  • SHA1

    3ca24def2471841c0ee54b454f328e6c459b1536

  • SHA256

    88c36eae0908d1d67977d9b32f9da35b45122b97c05c6844110d34ec83388abd

  • SHA512

    1588001def0473b8001f8188b9a19374119ee4acbe99f95ea385a0c2ad57d09057fcef7dbecae075edbb8ad41bde923f25ab95c7184403a15f83d5eb6240cb06

  • SSDEEP

    98304:hTDdIs5eoaLukI2UPMorYMRUuLZj186DYI7JJpvKEOWJ06nPoR:tsXLWPNYYUaD3bKEOWO6nwR

Malware Config

Targets

    • Target

      88c36eae0908d1d67977d9b32f9da35b45122b97c05c6844110d34ec83388abd

    • Size

      4.0MB

    • MD5

      c62982125ee1d246bbbcac25acd1b69b

    • SHA1

      3ca24def2471841c0ee54b454f328e6c459b1536

    • SHA256

      88c36eae0908d1d67977d9b32f9da35b45122b97c05c6844110d34ec83388abd

    • SHA512

      1588001def0473b8001f8188b9a19374119ee4acbe99f95ea385a0c2ad57d09057fcef7dbecae075edbb8ad41bde923f25ab95c7184403a15f83d5eb6240cb06

    • SSDEEP

      98304:hTDdIs5eoaLukI2UPMorYMRUuLZj186DYI7JJpvKEOWJ06nPoR:tsXLWPNYYUaD3bKEOWO6nwR

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks