Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3FD03E97E6F2458B005BDCE0947812B5EBA12F37580E4A961730FEE4868B0FA4

  • Size

    4.0MB

  • Sample

    220720-jky6tsdcc8

  • MD5

    23194ead1c594b2fc17bdf0ff9f14e7f

  • SHA1

    9ff70e5e430341d34323b180b9ea8de49a3071ee

  • SHA256

    3fd03e97e6f2458b005bdce0947812b5eba12f37580e4a961730fee4868b0fa4

  • SHA512

    92dc140b35f798bbf944fa2e907e84feb8745bbf59190a5f5b851de14f6d4d546c2d8d6c6525b044d9d5864ceaad17853926d2f16694a5b35e2ce8d15375e361

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      3FD03E97E6F2458B005BDCE0947812B5EBA12F37580E4A961730FEE4868B0FA4

    • Size

      4.0MB

    • MD5

      23194ead1c594b2fc17bdf0ff9f14e7f

    • SHA1

      9ff70e5e430341d34323b180b9ea8de49a3071ee

    • SHA256

      3fd03e97e6f2458b005bdce0947812b5eba12f37580e4a961730fee4868b0fa4

    • SHA512

      92dc140b35f798bbf944fa2e907e84feb8745bbf59190a5f5b851de14f6d4d546c2d8d6c6525b044d9d5864ceaad17853926d2f16694a5b35e2ce8d15375e361

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks