Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    E863D1DCD9CAA7A9ACBAFEDAED53973D2B98C338C54697D5BA9B10E7123D4C25

  • Size

    4.0MB

  • Sample

    220720-j7bztaded4

  • MD5

    49db7cc798fa58c6b0d5288310ec5014

  • SHA1

    811371f570d089bd0929b85a270a4f331e4dd75d

  • SHA256

    e863d1dcd9caa7a9acbafedaed53973d2b98c338c54697d5ba9b10e7123d4c25

  • SHA512

    bbba6b6eb3aefc806e55c6d5fec3cf1fe40755b0a2948f3ade369d18ee52f999b8f7397d047972b09d9504a18cc287d4d1dd92570acec83c51d3a885f5033c52

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      E863D1DCD9CAA7A9ACBAFEDAED53973D2B98C338C54697D5BA9B10E7123D4C25

    • Size

      4.0MB

    • MD5

      49db7cc798fa58c6b0d5288310ec5014

    • SHA1

      811371f570d089bd0929b85a270a4f331e4dd75d

    • SHA256

      e863d1dcd9caa7a9acbafedaed53973d2b98c338c54697d5ba9b10e7123d4c25

    • SHA512

      bbba6b6eb3aefc806e55c6d5fec3cf1fe40755b0a2948f3ade369d18ee52f999b8f7397d047972b09d9504a18cc287d4d1dd92570acec83c51d3a885f5033c52

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks