General

  • Target

    bd541cea6c9162659014e284f175bab6caf5eb2ef46e25c071920d6ce677e2fb

  • Size

    4.0MB

  • Sample

    220915-d417msfegn

  • MD5

    a84e78bc369cf54991fcfe4aa01fe8f8

  • SHA1

    9c36f08370b56800fa3c5e2e8ae64fce458d9e9d

  • SHA256

    bd541cea6c9162659014e284f175bab6caf5eb2ef46e25c071920d6ce677e2fb

  • SHA512

    ab93b206d31c7f7ff9a7a1143c30a966de24285c3555ece34fee5c420506e15e1c9692d3a3f2d97f2195c365e8538c9c52f9a525477d25d7ba0793c35a11ce63

  • SSDEEP

    98304:LB50BY64n1nr+oVLXTGLAODr+yfVAKG6enTSbbeRS2K:L+I1r+eLXypDr+ytAfnubPf

Malware Config

Targets

    • Target

      bd541cea6c9162659014e284f175bab6caf5eb2ef46e25c071920d6ce677e2fb

    • Size

      4.0MB

    • MD5

      a84e78bc369cf54991fcfe4aa01fe8f8

    • SHA1

      9c36f08370b56800fa3c5e2e8ae64fce458d9e9d

    • SHA256

      bd541cea6c9162659014e284f175bab6caf5eb2ef46e25c071920d6ce677e2fb

    • SHA512

      ab93b206d31c7f7ff9a7a1143c30a966de24285c3555ece34fee5c420506e15e1c9692d3a3f2d97f2195c365e8538c9c52f9a525477d25d7ba0793c35a11ce63

    • SSDEEP

      98304:LB50BY64n1nr+oVLXTGLAODr+yfVAKG6enTSbbeRS2K:L+I1r+eLXypDr+ytAfnubPf

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks