ytstealer | 1ed83cdde85305c31792de47f0b027895d9abf19382e571306b1ff6e9dc91ed6 | Triage

Analysis

max time kernel
5s
platform
windows10-1703_x64
resource
win10-20220718-en
resource tags

arch:x64arch:x86image:win10-20220718-enlocale:en-usos:windows10-1703-x64system
submitted
20/07/2022, 07:30

Sharing

Report Analysis Logs

General

Target

1ED83CDDE85305C31792DE47F0B027895D9ABF19382E571306B1FF6E9DC91ED6.exe
Size

4.0MB
MD5

5dd1803af5860a9a20d99b749a00462e
SHA1

b08316ede49f65f91ecf25661e80131e82a18aa4
SHA256

1ed83cdde85305c31792de47f0b027895d9abf19382e571306b1ff6e9dc91ed6
SHA512

ed80920761d99d53372cb4f99f986d9d6f8f77112cf51a52e65a47ff04cbde3a98128081e825ade025c21ae6b129dacd53e477acd908a378537a313c28377b73

Score

10^/10

ytstealer stealer upx

Malware Config

Signatures

YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
stealer ytstealer

YTStealer payload 1 IoCs

resource	yara_rule
behavioral2/memory/1172-117-0x00000000011B0000-0x0000000001F78000-memory.dmp	family_ytstealer

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1172-117-0x00000000011B0000-0x0000000001F78000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\1ED83CDDE85305C31792DE47F0B027895D9ABF19382E571306B1FF6E9DC91ED6.exe
"C:\Users\Admin\AppData\Local\Temp\1ED83CDDE85305C31792DE47F0B027895D9ABF19382E571306B1FF6E9DC91ED6.exe"
1⤵
PID:1172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1172-117-0x00000000011B0000-0x0000000001F78000-memory.dmp

Filesize
13.8MB

Download