Analysis
-
max time kernel
144s -
max time network
183s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
30/08/2022, 01:48
General
-
Target
58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6.exe
-
Size
4.0MB
-
MD5
fa2fabce38032e945e50f967548c9220
-
SHA1
10ea8f54789c177b84d8d2ee8bb7b272d4330e97
-
SHA256
58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6
-
SHA512
0b439e1be504843021789e1b2f4bc9b6b1ced225753b117c0bb1ba246ce39801f0c215c6c1b0fb9fb20b44449c13d4fde68d050d9bb3dfe5556eec231e80fb2e
-
SSDEEP
98304:zpkIhhI6DdmN9vzWv8blT6mKcwYl04bgSJyh2ttCF1pmLW:zKIhSAdwSkbISl7vim
Score
10/10
Malware Config
Signatures
-
YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
-
YTStealer payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6.exe"C:\Users\Admin\AppData\Local\Temp\58fdfa0820f7abfd280f69782847b239351a748ba235864ea047eadd53f21da6.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB