Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d92069309254d809dd0928e5dbf2b31f52b9bfde5557bf5ca1548749a3ac6e10

  • Size

    4.0MB

  • Sample

    220731-edzfssgbdj

  • MD5

    35bd0f45b2597660d7895609fbd4bf11

  • SHA1

    6e47c6ddccb7fab8ced9a8753ef27f5aa4a9e177

  • SHA256

    d92069309254d809dd0928e5dbf2b31f52b9bfde5557bf5ca1548749a3ac6e10

  • SHA512

    4353b165fe803069e34f9679c5302ec46c91323414b7444cf132b63e6bbf1cb5246165cbec4f56f7848621198955957a2dd2d939908c5db74f16755138cc691b

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      d92069309254d809dd0928e5dbf2b31f52b9bfde5557bf5ca1548749a3ac6e10

    • Size

      4.0MB

    • MD5

      35bd0f45b2597660d7895609fbd4bf11

    • SHA1

      6e47c6ddccb7fab8ced9a8753ef27f5aa4a9e177

    • SHA256

      d92069309254d809dd0928e5dbf2b31f52b9bfde5557bf5ca1548749a3ac6e10

    • SHA512

      4353b165fe803069e34f9679c5302ec46c91323414b7444cf132b63e6bbf1cb5246165cbec4f56f7848621198955957a2dd2d939908c5db74f16755138cc691b

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks