Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EDF67AE5DF451AC301FD4DE9150C7F411203CC74D0502A178D703D0C41338187

  • Size

    4.0MB

  • Sample

    220720-j8yvzaeagj

  • MD5

    64774e4563fc0ea00c6ea1390b1bed95

  • SHA1

    3f7764cc3f2282a6c34508a26e88b7b779fb47cc

  • SHA256

    edf67ae5df451ac301fd4de9150c7f411203cc74d0502a178d703d0c41338187

  • SHA512

    9f3d4611dacb40ff4b96ef6bcac1fb734ecbd6bbfaa10799809b10ffd394e2eda540408d38b8720f39697ae963665c7c9f3321cd749fa3dd3a2eb06e42c69277

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      EDF67AE5DF451AC301FD4DE9150C7F411203CC74D0502A178D703D0C41338187

    • Size

      4.0MB

    • MD5

      64774e4563fc0ea00c6ea1390b1bed95

    • SHA1

      3f7764cc3f2282a6c34508a26e88b7b779fb47cc

    • SHA256

      edf67ae5df451ac301fd4de9150c7f411203cc74d0502a178d703d0c41338187

    • SHA512

      9f3d4611dacb40ff4b96ef6bcac1fb734ecbd6bbfaa10799809b10ffd394e2eda540408d38b8720f39697ae963665c7c9f3321cd749fa3dd3a2eb06e42c69277

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks