hxxps://youtube[.]com/@boffy/ | Triage

Resubmissions

05/03/2025, 04:07

250305-ep5f7aymw5 6

27/01/2025, 01:26

250127-bttzgavkfm 7

27/01/2025, 01:13

250127-bk8fhasqgt 6

20/01/2025, 05:23

250120-f3dfastmap 7

20/01/2025, 05:07

250120-fr6ygasrdr 6

31/12/2024, 05:12

241231-fv24pawlhm 7

31/12/2024, 04:49

241231-ffsxgaylaw 10

31/12/2024, 04:46

241231-fd1jjaykby 7

31/12/2024, 04:31

241231-e5vlxsxpd1 10

Sharing

General

Target

https://youtube.com/@boffy/
Sample

250120-f3dfastmap

Score

7^/10

android antivm credential_access discovery linux persistence stealer

Malware Config

Targets

- Target
  
  https://youtube.com/@boffy/
Score

7^/10

credential_access discovery persistence stealer antivm
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Drops startup file
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

System Checks

Credential Access

Credentials from Password Stores

Windows Credential Manager

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

credential_accessdiscoverypersistencestealer

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

antivmdiscovery

behavioral7