Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    357CE30C8F64FF9FCBFE6AD248314448121B4170E73F40ED5BF73F93E327784F

  • Size

    4.0MB

  • Sample

    220812-hrj5taaack

  • MD5

    e2000fde77951994b583b3fdadce18fd

  • SHA1

    8308cc2a7c8a9e038b8d7d4765c192d1986e2b5d

  • SHA256

    357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

  • SHA512

    b691edae0036a5cb4ba89da2600214a83293ad1adb57e55e124389acfe61d1cae1170eb24d54c4f9095c15e9418de323820eb4ac1af2096f62569e37906395f9

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      357CE30C8F64FF9FCBFE6AD248314448121B4170E73F40ED5BF73F93E327784F

    • Size

      4.0MB

    • MD5

      e2000fde77951994b583b3fdadce18fd

    • SHA1

      8308cc2a7c8a9e038b8d7d4765c192d1986e2b5d

    • SHA256

      357ce30c8f64ff9fcbfe6ad248314448121b4170e73f40ed5bf73f93e327784f

    • SHA512

      b691edae0036a5cb4ba89da2600214a83293ad1adb57e55e124389acfe61d1cae1170eb24d54c4f9095c15e9418de323820eb4ac1af2096f62569e37906395f9

    Score
    10/10
    ytstealerspywarestealerupx

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks