Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3204C8AC0E8EFA95EC18CB0A31BB0E470DCE9DE7FEC873C995F1A9CB48F1C739

  • Size

    4.0MB

  • Sample

    220720-jgsjwadbh3

  • MD5

    4ea43c1228ceab5c14517d116cfbefe3

  • SHA1

    0dfdd70d4a217b0748fed1e7deabe89800cb292a

  • SHA256

    3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

  • SHA512

    2d5198c22188ff48e4ef80654dc33c21f356abebbfab56a7c1ced925ddbae975f6cbff24ca001f2d0321d713150732c5dabb2bdf081f742a742ef72a6bb2bbf5

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      3204C8AC0E8EFA95EC18CB0A31BB0E470DCE9DE7FEC873C995F1A9CB48F1C739

    • Size

      4.0MB

    • MD5

      4ea43c1228ceab5c14517d116cfbefe3

    • SHA1

      0dfdd70d4a217b0748fed1e7deabe89800cb292a

    • SHA256

      3204c8ac0e8efa95ec18cb0a31bb0e470dce9de7fec873c995f1a9cb48f1c739

    • SHA512

      2d5198c22188ff48e4ef80654dc33c21f356abebbfab56a7c1ced925ddbae975f6cbff24ca001f2d0321d713150732c5dabb2bdf081f742a742ef72a6bb2bbf5

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks