Analysis
-
max time kernel
245s -
max time network
54s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
-
submitted
09/08/2022, 23:32
General
-
Target
bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe
-
Size
4.0MB
-
MD5
6452e14763ae943f8e556f65c09473eb
-
SHA1
290981d61d73c696b475c8fefed323b569418bde
-
SHA256
bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e
-
SHA512
44ac3be1c66b734a908a88c79df310788dd5edd1e8bbaa577682459163fa347282a937d4d4d48710e1a1f08e89ca8d4674cbdbc51e015539dce4509645727796
Score
10/10
Malware Config
Signatures
-
YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
-
YTStealer payload 3 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe"C:\Users\Admin\AppData\Local\Temp\bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB