Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    D65F2C7C9949718C152BE861AD2370D3CD570E07EBA358D625F5E60EC02B955E

  • Size

    4.0MB

  • Sample

    220727-hcmmdsefh7

  • MD5

    996716611d933f252a6a95630cbede27

  • SHA1

    b8559f028a0873a0764aab3566475153dde931f1

  • SHA256

    d65f2c7c9949718c152be861ad2370d3cd570e07eba358d625f5e60ec02b955e

  • SHA512

    5e1790b1d89f62bacc6087fed8bc69ee0f247d715e84efde531c425b80308759c8770dd4b6cf321cce2b8026cde4eaecbba7573ca4bab0ad4385f8a564cbc38b

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      D65F2C7C9949718C152BE861AD2370D3CD570E07EBA358D625F5E60EC02B955E

    • Size

      4.0MB

    • MD5

      996716611d933f252a6a95630cbede27

    • SHA1

      b8559f028a0873a0764aab3566475153dde931f1

    • SHA256

      d65f2c7c9949718c152be861ad2370d3cd570e07eba358d625f5e60ec02b955e

    • SHA512

      5e1790b1d89f62bacc6087fed8bc69ee0f247d715e84efde531c425b80308759c8770dd4b6cf321cce2b8026cde4eaecbba7573ca4bab0ad4385f8a564cbc38b

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks