General

  • Target

    a9b558e1658ccc50bd076c98f0cb14ff4e5702982cc14f918b4bcee8e96c0540

  • Size

    4.0MB

  • Sample

    220915-d379kabhc4

  • MD5

    ebb3266a17a113966611ffa1dbc9e9e5

  • SHA1

    39f8c4469b92cea5532cab0e2e1b1893f0b6a6cf

  • SHA256

    a9b558e1658ccc50bd076c98f0cb14ff4e5702982cc14f918b4bcee8e96c0540

  • SHA512

    1cf6f32463bb9e8c5827e159364519de33f55a9af365b574f0d28174036e64e8eba8646993439b76442fbcf02c1e267b93e08567edc2db81de854a5f79f2dc3e

  • SSDEEP

    98304:Lw9z502/GG+Lf0wDeRhB/szdUvTKJqZIFRSYtp2oAN:89z50mt+Lf0EeRhx2dKmAIkN

Malware Config

Targets

    • Target

      a9b558e1658ccc50bd076c98f0cb14ff4e5702982cc14f918b4bcee8e96c0540

    • Size

      4.0MB

    • MD5

      ebb3266a17a113966611ffa1dbc9e9e5

    • SHA1

      39f8c4469b92cea5532cab0e2e1b1893f0b6a6cf

    • SHA256

      a9b558e1658ccc50bd076c98f0cb14ff4e5702982cc14f918b4bcee8e96c0540

    • SHA512

      1cf6f32463bb9e8c5827e159364519de33f55a9af365b574f0d28174036e64e8eba8646993439b76442fbcf02c1e267b93e08567edc2db81de854a5f79f2dc3e

    • SSDEEP

      98304:Lw9z502/GG+Lf0wDeRhB/szdUvTKJqZIFRSYtp2oAN:89z50mt+Lf0EeRhx2dKmAIkN

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks