Overview

overview

10

Static

static

8

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    4.0MB

  • Sample

    220823-rwaxdafcgr

  • MD5

    f5c9a86d3405816dd987976a96793a96

  • SHA1

    7ed293f0cf8426b4bfbb8d0144fe3fb97e2d6c83

  • SHA256

    2f92554a407ab10b4d8485ab5924f7ed2a52dedc735a21b828dba224d839391e

  • SHA512

    a76f56de3c8d5721d6f6550b3e3275f78bdc4bfed32fefdcd62cde69ff2c1966c6e7332f3675885fef2d9c32240f77ed53fc993673e60a431a81f23fba91d958

  • SSDEEP

    98304:DiWCL/rtIkroAEl7GNo4dHHFATQqpDjKD:yS/NWo4dHl4QqpDjK

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      file

    • Size

      4.0MB

    • MD5

      f5c9a86d3405816dd987976a96793a96

    • SHA1

      7ed293f0cf8426b4bfbb8d0144fe3fb97e2d6c83

    • SHA256

      2f92554a407ab10b4d8485ab5924f7ed2a52dedc735a21b828dba224d839391e

    • SHA512

      a76f56de3c8d5721d6f6550b3e3275f78bdc4bfed32fefdcd62cde69ff2c1966c6e7332f3675885fef2d9c32240f77ed53fc993673e60a431a81f23fba91d958

    • SSDEEP

      98304:DiWCL/rtIkroAEl7GNo4dHHFATQqpDjKD:yS/NWo4dHl4QqpDjK

    Score
    10/10
    ytstealerstealerupxspyware

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks