There's Something About CryptBot: Yet Another Silly Stealer

SUMMARY :

This report provides an in-depth technical analysis of a new variant of the CryptBot infostealer, dubbed Yet Another Silly Stealer (YASS). It details the delivery chain, involving the MustardSandwich downloader, and dissects the YASS payload's functionalities, including its data gathering, encryption, and exfiltration mechanisms. The report also highlights similarities and differences between YASS and its predecessor, CryptBot, offering insights into the evolution of this malware family.

OPENCTI LABELS :

stealer,malware,infostealer,downloader,exfiltration,cryptbot,netsupport,yass,mustardsandwich


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


There's Something About CryptBot: Yet Another Silly Stealer