Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26FED2C1DD8F187471DC4566117565DD34451AA4401FC2B271AA9DE60DF3AECB

  • Size

    4.0MB

  • Sample

    220720-jegpladfeq

  • MD5

    efb547309c1d3f1d88dbeaea67624002

  • SHA1

    1ed73f37b906652a976c5d7c377685f7f0e8f1c9

  • SHA256

    26fed2c1dd8f187471dc4566117565dd34451aa4401fc2b271aa9de60df3aecb

  • SHA512

    4d38e8595e6bed32b99ffcdad16baa6983e3728a12dae3a918baf47e962c3b14dca2f2279b25fbbe3d805f90f99898bc458ae3347873945fbb30f974eeb347bd

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      26FED2C1DD8F187471DC4566117565DD34451AA4401FC2B271AA9DE60DF3AECB

    • Size

      4.0MB

    • MD5

      efb547309c1d3f1d88dbeaea67624002

    • SHA1

      1ed73f37b906652a976c5d7c377685f7f0e8f1c9

    • SHA256

      26fed2c1dd8f187471dc4566117565dd34451aa4401fc2b271aa9de60df3aecb

    • SHA512

      4d38e8595e6bed32b99ffcdad16baa6983e3728a12dae3a918baf47e962c3b14dca2f2279b25fbbe3d805f90f99898bc458ae3347873945fbb30f974eeb347bd

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks