Analysis
-
max time kernel
49s -
max time network
128s -
platform
windows10-1703_x64 -
resource
win10-20220722-en -
resource tags
arch:x64arch:x86image:win10-20220722-enlocale:en-usos:windows10-1703-x64system -
submitted
08-08-2022 22:15
Behavioral task
behavioral1
Sample
7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060.exe
Resource
win7-20220715-en
windows7-x64
4 signatures
300 seconds
General
-
Target
7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060.exe
-
Size
4.0MB
-
MD5
54759c68e5daf4d0195ccc4bd929b6ce
-
SHA1
4dd9a7932308baec2b2d9d5e87aca88a488ac74e
-
SHA256
7819f51ad0cc844210b83cc218fe2c750c87cfc6f0c21921a3ceebc62b76b060
-
SHA512
1ca17ba07d44b26e25e7594a33510d772079e754fa8c06cde97cc5ede4d5a40e2e5ba0605ea1b075ac3e4e3c167075dacbd86094d5e5861195d1376352572d12
Malware Config
Signatures
-
YTStealer payload 2 IoCs
Processes:
resource yara_rule behavioral2/memory/4748-128-0x0000000000EA0000-0x0000000001CB1000-memory.dmp family_ytstealer behavioral2/memory/4748-129-0x0000000000EA0000-0x0000000001CB1000-memory.dmp family_ytstealer -
Processes:
resource yara_rule behavioral2/memory/4748-127-0x0000000000EA0000-0x0000000001CB1000-memory.dmp upx behavioral2/memory/4748-128-0x0000000000EA0000-0x0000000001CB1000-memory.dmp upx behavioral2/memory/4748-129-0x0000000000EA0000-0x0000000001CB1000-memory.dmp upx -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.