Analysis
-
max time kernel
55s -
max time network
185s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
15-08-2022 10:15
General
-
Target
a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb.exe
-
Size
4.0MB
-
MD5
47b29465bb5fcbbd899f1d98af193f06
-
SHA1
ddd7c01b07939751f734c1e9b7aa17853447e02c
-
SHA256
a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb
-
SHA512
838a170802283f318712195402dc26dc601d2f81d3dae1f32309e532af732808c1a8b03c80f7dcf99b2ae94276678bb4211a44ebe889335da34a6083c4bd31f8
Score
10/10
Malware Config
Signatures
-
YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
-
YTStealer payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb.exe"C:\Users\Admin\AppData\Local\Temp\a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB