Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ED83CDDE85305C31792DE47F0B027895D9ABF19382E571306B1FF6E9DC91ED6

  • Size

    4.0MB

  • Sample

    220720-jb653sdbc7

  • MD5

    5dd1803af5860a9a20d99b749a00462e

  • SHA1

    b08316ede49f65f91ecf25661e80131e82a18aa4

  • SHA256

    1ed83cdde85305c31792de47f0b027895d9abf19382e571306b1ff6e9dc91ed6

  • SHA512

    ed80920761d99d53372cb4f99f986d9d6f8f77112cf51a52e65a47ff04cbde3a98128081e825ade025c21ae6b129dacd53e477acd908a378537a313c28377b73

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      1ED83CDDE85305C31792DE47F0B027895D9ABF19382E571306B1FF6E9DC91ED6

    • Size

      4.0MB

    • MD5

      5dd1803af5860a9a20d99b749a00462e

    • SHA1

      b08316ede49f65f91ecf25661e80131e82a18aa4

    • SHA256

      1ed83cdde85305c31792de47f0b027895d9abf19382e571306b1ff6e9dc91ed6

    • SHA512

      ed80920761d99d53372cb4f99f986d9d6f8f77112cf51a52e65a47ff04cbde3a98128081e825ade025c21ae6b129dacd53e477acd908a378537a313c28377b73

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks