Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    A3C93F6F564C4BF90C0234024898E2FE4C3C1F3F9F225EE871CB4D773FDDAEC2

  • Size

    4.0MB

  • Sample

    220727-haylwaefg2

  • MD5

    f9ba1595223c69e435b806610d43186d

  • SHA1

    f6b0c20667eb38f140c18b717be6698a90574ddc

  • SHA256

    a3c93f6f564c4bf90c0234024898e2fe4c3c1f3f9f225ee871cb4d773fddaec2

  • SHA512

    3244867074190342a52ec96971ad622a525c46bd90564c500966e7fa4e02747db9693a69047dda8355127a8423261498c7dbc126bcc3307d9b08bed9df6d0ea4

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      A3C93F6F564C4BF90C0234024898E2FE4C3C1F3F9F225EE871CB4D773FDDAEC2

    • Size

      4.0MB

    • MD5

      f9ba1595223c69e435b806610d43186d

    • SHA1

      f6b0c20667eb38f140c18b717be6698a90574ddc

    • SHA256

      a3c93f6f564c4bf90c0234024898e2fe4c3c1f3f9f225ee871cb4d773fddaec2

    • SHA512

      3244867074190342a52ec96971ad622a525c46bd90564c500966e7fa4e02747db9693a69047dda8355127a8423261498c7dbc126bcc3307d9b08bed9df6d0ea4

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks