ytstealer | bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e

Analysis

max time kernel
37s
max time network
43s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25/08/2022, 06:19

Target

bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe
Size

4.0MB
MD5

6452e14763ae943f8e556f65c09473eb
SHA1

290981d61d73c696b475c8fefed323b569418bde
SHA256

bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e
SHA512

44ac3be1c66b734a908a88c79df310788dd5edd1e8bbaa577682459163fa347282a937d4d4d48710e1a1f08e89ca8d4674cbdbc51e015539dce4509645727796
SSDEEP

98304:wLkWvEFW/Aqom+wjGhcp2fN3Yvb30jPlhLmP/Y8o7124:wLjv+sLE5hcQNIvb30jfLmXY8Y0

Score

10^/10

YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
stealer ytstealer

YTStealer payload 2 IoCs

resource	yara_rule
behavioral1/memory/1672-54-0x0000000000820000-0x0000000001632000-memory.dmp	family_ytstealer
behavioral1/memory/1672-55-0x0000000000820000-0x0000000001632000-memory.dmp	family_ytstealer

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1672-54-0x0000000000820000-0x0000000001632000-memory.dmp	upx
behavioral1/memory/1672-55-0x0000000000820000-0x0000000001632000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe
"C:\Users\Admin\AppData\Local\Temp\bc35c66b1be35a701e70388789b6446093fa71716801c8828c3f363eee1a183e.exe"
1⤵
PID:1672

memory/1672-54-0x0000000000820000-0x0000000001632000-memory.dmp

Filesize
14.1MB

Download
memory/1672-55-0x0000000000820000-0x0000000001632000-memory.dmp

Filesize
14.1MB

Download