General

  • Target

    18fb5108dc25caac2c5cccff5583a297d3eff58ec86a28b6fd6b3e5c542c5f78

  • Size

    4.0MB

  • Sample

    220915-dxth8abgh6

  • MD5

    ed6dddc2516c34092d53008a482784dc

  • SHA1

    8569ebfeba7c442af07555325dffa09cb164d139

  • SHA256

    18fb5108dc25caac2c5cccff5583a297d3eff58ec86a28b6fd6b3e5c542c5f78

  • SHA512

    93b83727d8311e52087cc30156ee8cc958474d47bd86d2f52424b0bfe34adc483d4980a29aef684ec69292024f57a444bb02b308a1cb254ae5bc48b809012e79

  • SSDEEP

    98304:ttNhYl6DdXAUusbZ4IHdXFdacq21lkB9lMVCTWQi+Pb9Ei:ttjHDdXAUTaq/SywlMVB+RE

Malware Config

Targets

    • Target

      18fb5108dc25caac2c5cccff5583a297d3eff58ec86a28b6fd6b3e5c542c5f78

    • Size

      4.0MB

    • MD5

      ed6dddc2516c34092d53008a482784dc

    • SHA1

      8569ebfeba7c442af07555325dffa09cb164d139

    • SHA256

      18fb5108dc25caac2c5cccff5583a297d3eff58ec86a28b6fd6b3e5c542c5f78

    • SHA512

      93b83727d8311e52087cc30156ee8cc958474d47bd86d2f52424b0bfe34adc483d4980a29aef684ec69292024f57a444bb02b308a1cb254ae5bc48b809012e79

    • SSDEEP

      98304:ttNhYl6DdXAUusbZ4IHdXFdacq21lkB9lMVCTWQi+Pb9Ei:ttjHDdXAUTaq/SywlMVB+RE

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks