ytstealer | 67b332100d772722736d2fd90514ef2af23d84e800c880155f3da38a21fea829 | Triage

Analysis

max time kernel
1s
platform
windows10-1703_x64
resource
win10-20220718-en
resource tags

arch:x64arch:x86image:win10-20220718-enlocale:en-usos:windows10-1703-x64system
submitted
20/07/2022, 08:01

Sharing

Report Analysis Logs

General

Target

67B332100D772722736D2FD90514EF2AF23D84E800C880155F3DA38A21FEA829.exe
Size

4.0MB
MD5

f155b0bbfef9582f2e4078f2d17e8227
SHA1

657206207995bffb0579091019f77bf7ab4ae5ee
SHA256

67b332100d772722736d2fd90514ef2af23d84e800c880155f3da38a21fea829
SHA512

1418ef478583ca04895dd9b8a38400aaaf7d3d6de9aa5b77e0c0c96165db1a89cc8b4bd3962ac567caa9b7746f568f6f1ed691c953c66f5a17d0866c491d434b

Score

10^/10

ytstealer stealer upx

Malware Config

Signatures

YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
stealer ytstealer

YTStealer payload 1 IoCs

resource	yara_rule
behavioral2/memory/3236-117-0x0000000000B00000-0x00000000018C9000-memory.dmp	family_ytstealer

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3236-117-0x0000000000B00000-0x00000000018C9000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\67B332100D772722736D2FD90514EF2AF23D84E800C880155F3DA38A21FEA829.exe
"C:\Users\Admin\AppData\Local\Temp\67B332100D772722736D2FD90514EF2AF23D84E800C880155F3DA38A21FEA829.exe"
1⤵
PID:3236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3236-117-0x0000000000B00000-0x00000000018C9000-memory.dmp

Filesize
13.8MB

Download