General

  • Target

    52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

  • Size

    4.1MB

  • Sample

    220904-tfddnscga7

  • MD5

    ceef7938f0bf3b59ab2b6d31633529a2

  • SHA1

    c706f701407c878bfd11f53373a698c977fa9013

  • SHA256

    52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

  • SHA512

    ba14c980658c2974abcdf1188c2a26baf2d46ef4637e5abf49f48a4f88873e855928e89b7b921a3f59e13b71ffd582613e22b21974ec78d8c70f1fb959eb18b2

  • SSDEEP

    98304:fVoXSjNPl7AYbFijNQB3fYIkyHf3QxYbXDkMau10iW:NoXSjNt7d2WvFHf3Q27DkMaiW

Malware Config

Targets

    • Target

      52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

    • Size

      4.1MB

    • MD5

      ceef7938f0bf3b59ab2b6d31633529a2

    • SHA1

      c706f701407c878bfd11f53373a698c977fa9013

    • SHA256

      52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

    • SHA512

      ba14c980658c2974abcdf1188c2a26baf2d46ef4637e5abf49f48a4f88873e855928e89b7b921a3f59e13b71ffd582613e22b21974ec78d8c70f1fb959eb18b2

    • SSDEEP

      98304:fVoXSjNPl7AYbFijNQB3fYIkyHf3QxYbXDkMau10iW:NoXSjNt7d2WvFHf3Q27DkMaiW

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks