Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69291E517EDBE12D321AB35261E4E9799C16C7C7AEB27AA088F8821E6FB06577

  • Size

    4.0MB

  • Sample

    220720-jxkh7sdhdq

  • MD5

    735298ff31f287b9f40e501816bb76ca

  • SHA1

    a9597d09115a4fb953ed7e6f96b2e1cc4679eb93

  • SHA256

    69291e517edbe12d321ab35261e4e9799c16c7c7aeb27aa088f8821e6fb06577

  • SHA512

    d9f8304fb86b3901d3bec6a49c3a680a692afeb134f4be7dd69b65f82173706140a41da20021b222d0330e0546c77c65c8363d8a22941278a2b33b4d6fcfca47

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      69291E517EDBE12D321AB35261E4E9799C16C7C7AEB27AA088F8821E6FB06577

    • Size

      4.0MB

    • MD5

      735298ff31f287b9f40e501816bb76ca

    • SHA1

      a9597d09115a4fb953ed7e6f96b2e1cc4679eb93

    • SHA256

      69291e517edbe12d321ab35261e4e9799c16c7c7aeb27aa088f8821e6fb06577

    • SHA512

      d9f8304fb86b3901d3bec6a49c3a680a692afeb134f4be7dd69b65f82173706140a41da20021b222d0330e0546c77c65c8363d8a22941278a2b33b4d6fcfca47

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks