Analysis
-
max time kernel
165s -
max time network
179s -
platform
windows10_x64 -
resource
win10-20220414-en -
resource tags
-
submitted
11/08/2022, 22:15
General
-
Target
ce53650a61d7bee5700e942f4682b6b56b2051ad89ba8d9d2c8a0d2164dff533.exe
-
Size
4.0MB
-
MD5
3bac181a69aaaeadc9de71837f9cfb07
-
SHA1
29938258ca919a00611f97d6fb0e6fc604c27348
-
SHA256
ce53650a61d7bee5700e942f4682b6b56b2051ad89ba8d9d2c8a0d2164dff533
-
SHA512
129efef5e662376738c2e1003f7d3346193c089b4accd5b47ed01debaeed1083d299d5eaca688cd901308d1b31bf29fae76e669e64883aa0cc120940beedd464
Score
10/10
Malware Config
Signatures
-
YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
-
YTStealer payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce53650a61d7bee5700e942f4682b6b56b2051ad89ba8d9d2c8a0d2164dff533.exe"C:\Users\Admin\AppData\Local\Temp\ce53650a61d7bee5700e942f4682b6b56b2051ad89ba8d9d2c8a0d2164dff533.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB