There’s Something About CryptBot: Yet Another Silly Stealer (YASS)

**Executive Summary:** This report analyzes a multi-stage delivery chain (MustardSandwich) that installs a new infostealer dubbed Yet Another Silly Stealer (YASS), documents its capabilities to harvest browser data, wallets, and system information, describes its RC4/HTTP exfiltration and optional NetSupport RAT deployment, and provides IOCs (file hashes, URLs, domains, IP) and behavioral differences from CryptBot.