ytstealer | 9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57 | Triage

Submit
Reports

Overview

overview

Static

static

8

winprofile

windows7-x64

winprofile

windows10-1703-x64

Sharing

General

Target

9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57
Size

4.0MB
Sample

220825-ej7dlagbg3
MD5

5e0c84f67f0e7050515cb78056c6f813
SHA1

f48e3fe96f438dda3fe66f091ffac71da85baa2f
SHA256

9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57
SHA512

3a7079ca83140af2d9da034b0b14c0df707727100aa9cd9840fff39cf63c66776c3f4a6c8bd55a4e0324e80470b63a025b72b83b0cd236d5d7d8ffade45e238b
SSDEEP

49152:sfy2P2DaVPl0fAPIlXX+mLFjRCStbKPI9lIxa5m9bPoUOobnWqX1QORP0liB:sPGEltqRL9tbe45IroUOodM

Score

10^/10

ytstealer spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57.exe

Resource

win7-20220812-en

ytstealer spyware stealer upx

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral2

Sample

9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57.exe

Resource

win10-20220812-en

ytstealer spyware stealer upx

windows10-1703-x64

4 signatures

300 seconds

Malware Config

Targets

- Target
  
  9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57
- Size
  
  4.0MB
- MD5
  
  5e0c84f67f0e7050515cb78056c6f813
- SHA1
  
  f48e3fe96f438dda3fe66f091ffac71da85baa2f
- SHA256
  
  9c599e95dbcedb3e4583f8ab321b97f1afe468b9104bf981c82b825e08770c57
- SHA512
  
  3a7079ca83140af2d9da034b0b14c0df707727100aa9cd9840fff39cf63c66776c3f4a6c8bd55a4e0324e80470b63a025b72b83b0cd236d5d7d8ffade45e238b
- SSDEEP
  
  49152:sfy2P2DaVPl0fAPIlXX+mLFjRCStbKPI9lIxa5m9bPoUOobnWqX1QORP0liB:sPGEltqRL9tbe45IroUOodM
Score

10^/10

ytstealer spyware stealer upx
- YTStealer
  YTStealer is a malware designed to steal YouTube authentication cookies.
  stealer ytstealer
- YTStealer payload
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ytstealerspywarestealerupx

behavioral2

ytstealerspywarestealerupx

© 2018-2024

Terms | Privacy