General

  • Target

    880c002df447636a1e2b492a27a01fa5db8ad51ece22e110ad52f83201c73bca

  • Size

    4.0MB

  • Sample

    220915-d3f53sbhc2

  • MD5

    8cee8d91fd2c518f360805f77d5462af

  • SHA1

    9b9193d82ca01f2033398e0bcdebd3b01ece9ffb

  • SHA256

    880c002df447636a1e2b492a27a01fa5db8ad51ece22e110ad52f83201c73bca

  • SHA512

    449bbdeb84a063fad162fb560cf9a9e145e5312b4857532efa214561d1df16ed2b929fc7eb9a8a8dc744406756d504c0c4da01403add2145886be96471c566e3

  • SSDEEP

    98304:WPheJSnB+guwvD/oYAwFNL4ybS5qq+IK3Yjs9:KEJbguMDQqLTfqPs9

Malware Config

Targets

    • Target

      880c002df447636a1e2b492a27a01fa5db8ad51ece22e110ad52f83201c73bca

    • Size

      4.0MB

    • MD5

      8cee8d91fd2c518f360805f77d5462af

    • SHA1

      9b9193d82ca01f2033398e0bcdebd3b01ece9ffb

    • SHA256

      880c002df447636a1e2b492a27a01fa5db8ad51ece22e110ad52f83201c73bca

    • SHA512

      449bbdeb84a063fad162fb560cf9a9e145e5312b4857532efa214561d1df16ed2b929fc7eb9a8a8dc744406756d504c0c4da01403add2145886be96471c566e3

    • SSDEEP

      98304:WPheJSnB+guwvD/oYAwFNL4ybS5qq+IK3Yjs9:KEJbguMDQqLTfqPs9

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks