Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4648B964EA9BC1413B6A365BE7D665143C7F1D246BBEF3233E1D3449E3DB8FA8

  • Size

    4.0MB

  • Sample

    220720-jlqwvadcd2

  • MD5

    8fb7786eff6684cf88765737627d6a94

  • SHA1

    72df50be821f033c766d1772afca09a19cd4eefc

  • SHA256

    4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

  • SHA512

    c9c1673155d85251cf324eacd4f2709c41bdbce3ea1fff4de0b79b0af9733baacb78cb9eda7ddbe5165d740a89a951284fea7e03b2f0a8fcefdac5105c6958d8

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      4648B964EA9BC1413B6A365BE7D665143C7F1D246BBEF3233E1D3449E3DB8FA8

    • Size

      4.0MB

    • MD5

      8fb7786eff6684cf88765737627d6a94

    • SHA1

      72df50be821f033c766d1772afca09a19cd4eefc

    • SHA256

      4648b964ea9bc1413b6a365be7d665143c7f1d246bbef3233e1d3449e3db8fa8

    • SHA512

      c9c1673155d85251cf324eacd4f2709c41bdbce3ea1fff4de0b79b0af9733baacb78cb9eda7ddbe5165d740a89a951284fea7e03b2f0a8fcefdac5105c6958d8

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks